# Flog Txt Version 1 # Analyzer Version: 3.1.2 # Analyzer Build Date: Oct 28 2019 11:51:53 # Log Creation Date: 04.11.2019 22:55:49.892 Process: id = "1" image_name = "rbvcvbne.exe" filename = "c:\\users\\fd1hvy\\desktop\\rbvcvbne.exe" page_root = "0x841e000" os_pid = "0x9d8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\rbvcvbne.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xcfc [0039.818] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0039.847] RoInitialize () returned 0x1 [0039.848] RoUninitialize () returned 0x0 [0042.600] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x4fa9b8 | out: phkResult=0x4fa9b8*=0x0) returned 0x2 [0042.601] RegCloseKey (hKey=0x80000002) returned 0x0 [0042.606] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x4fac10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0042.689] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x4fac74, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0042.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4fb128) returned 1 [0042.692] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x4fb1a4 | out: lpFileInformation=0x4fb1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0042.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4fb124) returned 1 [0042.913] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x4fb080 | out: pfEnabled=0x4fb080) returned 0x0 [0044.241] EtwEventRegister (in: ProviderId=0x231a78c, EnableCallback=0x477070e, CallbackContext=0x0, RegHandle=0x231a768 | out: RegHandle=0x231a768) returned 0x0 [0044.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4feee8) returned 1 [0044.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\rbvcvbne.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\rbvcvbne.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x4fef64 | out: lpFileInformation=0x4fef64*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0044.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4feee4) returned 1 [0044.819] GetCurrentProcess () returned 0xffffffff [0044.820] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4fed4c | out: TokenHandle=0x4fed4c*=0x374) returned 1 [0044.824] GetTokenInformation (in: TokenHandle=0x374, TokenInformationClass=0x4, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x4fed9c | out: TokenInformation=0x0, ReturnLength=0x4fed9c) returned 0 [0044.824] LocalAlloc (uFlags=0x0, uBytes=0x14) returned 0x5460c0 [0044.824] GetTokenInformation (in: TokenHandle=0x374, TokenInformationClass=0x4, TokenInformation=0x5460c0, TokenInformationLength=0x14, ReturnLength=0x4fed9c | out: TokenInformation=0x5460c0, ReturnLength=0x4fed9c) returned 1 [0044.827] LocalFree (hMem=0x5460c0) returned 0x0 [0044.827] GetTokenInformation (in: TokenHandle=0x374, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x4fed9c | out: TokenInformation=0x0, ReturnLength=0x4fed9c) returned 0 [0044.827] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x5314b0 [0044.827] GetTokenInformation (in: TokenHandle=0x374, TokenInformationClass=0x1, TokenInformation=0x5314b0, TokenInformationLength=0x24, ReturnLength=0x4fed9c | out: TokenInformation=0x5314b0, ReturnLength=0x4fed9c) returned 1 [0044.827] LocalFree (hMem=0x5314b0) returned 0x0 [0047.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2205, flAllocationType=0x3000, flProtect=0x40) returned 0x22b0000 [0047.094] CoTaskMemAlloc (cb=0x20e) returned 0x5772d0 [0047.094] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x5772d0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0047.095] CoTaskMemFree (pv=0x5772d0) [0047.097] strlen (_Str="kernel32.dll") returned 0xc [0047.097] mbstowcs (in: _Dest=0x4fca20, _Source="kernel32.dll", _MaxCount=0xd | out: _Dest="kernel32.dll") returned 0xc [0047.097] strlen (_Str="KERNEL32.DLL") returned 0xc [0047.097] mbstowcs (in: _Dest=0x4fc818, _Source="KERNEL32.DLL", _MaxCount=0xd | out: _Dest="KERNEL32.DLL") returned 0xc [0047.097] strlen (_Str="\\KnownDlls32\\ntdll.dll") returned 0x16 [0047.097] mbstowcs (in: _Dest=0x4fcc28, _Source="\\KnownDlls32\\ntdll.dll", _MaxCount=0x17 | out: _Dest="\\KnownDlls32\\ntdll.dll") returned 0x16 [0047.097] strlen (_Str="\\KnownDlls32\\advapi32.dll") returned 0x19 [0047.097] mbstowcs (in: _Dest=0x4fce30, _Source="\\KnownDlls32\\advapi32.dll", _MaxCount=0x1a | out: _Dest="\\KnownDlls32\\advapi32.dll") returned 0x19 [0047.097] strlen (_Str="\\KnownDlls32\\kernel32.dll") returned 0x19 [0047.097] mbstowcs (in: _Dest=0x4fde70, _Source="\\KnownDlls32\\kernel32.dll", _MaxCount=0x1a | out: _Dest="\\KnownDlls32\\kernel32.dll") returned 0x19 [0047.097] strlen (_Str="\\KnownDlls32\\user32.dll") returned 0x17 [0047.097] mbstowcs (in: _Dest=0x4fdc68, _Source="\\KnownDlls32\\user32.dll", _MaxCount=0x18 | out: _Dest="\\KnownDlls32\\user32.dll") returned 0x17 [0047.097] strlen (_Str="\\KnownDlls32\\Ole32.dll") returned 0x16 [0047.097] mbstowcs (in: _Dest=0x4fd448, _Source="\\KnownDlls32\\Ole32.dll", _MaxCount=0x17 | out: _Dest="\\KnownDlls32\\Ole32.dll") returned 0x16 [0047.097] strlen (_Str="\\KnownDlls\\ntdll.dll") returned 0x14 [0047.098] mbstowcs (in: _Dest=0x4fd650, _Source="\\KnownDlls\\ntdll.dll", _MaxCount=0x15 | out: _Dest="\\KnownDlls\\ntdll.dll") returned 0x14 [0047.098] strlen (_Str="\\KnownDlls\\advapi32.dll") returned 0x17 [0047.098] mbstowcs (in: _Dest=0x4fda60, _Source="\\KnownDlls\\advapi32.dll", _MaxCount=0x18 | out: _Dest="\\KnownDlls\\advapi32.dll") returned 0x17 [0047.098] strlen (_Str="\\KnownDlls\\kernel32.dll") returned 0x17 [0047.098] mbstowcs (in: _Dest=0x4fd240, _Source="\\KnownDlls\\kernel32.dll", _MaxCount=0x18 | out: _Dest="\\KnownDlls\\kernel32.dll") returned 0x17 [0047.098] strlen (_Str="\\KnownDlls\\user32.dll") returned 0x15 [0047.098] mbstowcs (in: _Dest=0x4fd858, _Source="\\KnownDlls\\user32.dll", _MaxCount=0x16 | out: _Dest="\\KnownDlls\\user32.dll") returned 0x15 [0047.098] strlen (_Str="\\KnownDlls\\Ole32.dll") returned 0x14 [0047.098] mbstowcs (in: _Dest=0x4fd038, _Source="\\KnownDlls\\Ole32.dll", _MaxCount=0x15 | out: _Dest="\\KnownDlls\\Ole32.dll") returned 0x14 [0047.098] wcslen (_String="\\KnownDlls32\\advapi32.dll") returned 0x19 [0047.098] NtOpenSection (in: SectionHandle=0x4fc7f4, DesiredAccess=0xc, ObjectAttributes=0x4fc7a4*(Length=0x18, RootDirectory=0x0, ObjectName="\\KnownDlls32\\advapi32.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: SectionHandle=0x4fc7f4*=0x378) returned 0x0 [0047.098] NtMapViewOfSection (in: SectionHandle=0x378, ProcessHandle=0xffffffff, BaseAddress=0x4fc7fc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x4fc7f8*=0x0, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x4fc7fc*=0x47f0000, SectionOffset=0x0, ViewSize=0x4fc7f8*=0x77000) returned 0x40000003 [0047.098] wcslen (_String="\\KnownDlls32\\ntdll.dll") returned 0x16 [0047.098] NtOpenSection (in: SectionHandle=0x4fc7f4, DesiredAccess=0xc, ObjectAttributes=0x4fc7a4*(Length=0x18, RootDirectory=0x0, ObjectName="\\KnownDlls32\\ntdll.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: SectionHandle=0x4fc7f4*=0x37c) returned 0x0 [0047.098] NtMapViewOfSection (in: SectionHandle=0x37c, ProcessHandle=0xffffffff, BaseAddress=0x4fc7fc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x4fc7f8*=0x0, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x4fc7fc*=0x4870000, SectionOffset=0x0, ViewSize=0x4fc7f8*=0x18e000) returned 0x40000003 [0047.099] wcslen (_String="\\KnownDlls32\\kernel32.dll") returned 0x19 [0047.099] NtOpenSection (in: SectionHandle=0x4fc7f4, DesiredAccess=0xc, ObjectAttributes=0x4fc7a4*(Length=0x18, RootDirectory=0x0, ObjectName="\\KnownDlls32\\kernel32.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: SectionHandle=0x4fc7f4*=0x380) returned 0x0 [0047.099] NtMapViewOfSection (in: SectionHandle=0x380, ProcessHandle=0xffffffff, BaseAddress=0x4fc7fc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x4fc7f8*=0x0, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x4fc7fc*=0x4a00000, SectionOffset=0x0, ViewSize=0x4fc7f8*=0xd0000) returned 0x40000003 [0047.099] wcslen (_String="\\KnownDlls32\\user32.dll") returned 0x17 [0047.099] NtOpenSection (in: SectionHandle=0x4fc7f4, DesiredAccess=0xc, ObjectAttributes=0x4fc7a4*(Length=0x18, RootDirectory=0x0, ObjectName="\\KnownDlls32\\user32.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: SectionHandle=0x4fc7f4*=0x384) returned 0x0 [0047.099] NtMapViewOfSection (in: SectionHandle=0x384, ProcessHandle=0xffffffff, BaseAddress=0x4fc7fc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x4fc7f8*=0x0, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x4fc7fc*=0x4ad0000, SectionOffset=0x0, ViewSize=0x4fc7f8*=0x13c000) returned 0x40000003 [0047.102] wcslen (_String="\\KnownDlls32\\Ole32.dll") returned 0x16 [0047.102] NtOpenSection (in: SectionHandle=0x4fc7f4, DesiredAccess=0xc, ObjectAttributes=0x4fc7a4*(Length=0x18, RootDirectory=0x0, ObjectName="\\KnownDlls32\\Ole32.dll", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: SectionHandle=0x4fc7f4*=0x388) returned 0x0 [0047.102] NtMapViewOfSection (in: SectionHandle=0x388, ProcessHandle=0xffffffff, BaseAddress=0x4fc7fc*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x4fc7f8*=0x0, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x4fc7fc*=0x4c10000, SectionOffset=0x0, ViewSize=0x4fc7f8*=0xf3000) returned 0x40000003 [0047.104] LoadLibraryA (lpLibFileName="Ole32.dll") returned 0x77920000 [0047.104] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x761b0000 [0047.104] GetProcAddress (hModule=0x761b0000, lpProcName="CryptAcquireContextW") returned 0x761cfa40 [0047.104] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x761b0000 [0047.104] GetProcAddress (hModule=0x761b0000, lpProcName="CryptCreateHash") returned 0x761ceed0 [0047.104] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x761b0000 [0047.105] GetProcAddress (hModule=0x761b0000, lpProcName="CryptDecrypt") returned 0x761d3350 [0047.105] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x761b0000 [0047.105] GetProcAddress (hModule=0x761b0000, lpProcName="CryptDeriveKey") returned 0x761e2c90 [0047.105] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x761b0000 [0047.106] GetProcAddress (hModule=0x761b0000, lpProcName="CryptDestroyHash") returned 0x761cf0e0 [0047.106] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x761b0000 [0047.106] GetProcAddress (hModule=0x761b0000, lpProcName="CryptDestroyKey") returned 0x761cfa60 [0047.106] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x761b0000 [0047.106] GetProcAddress (hModule=0x761b0000, lpProcName="CryptHashData") returned 0x761ceef0 [0047.106] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x761b0000 [0047.106] GetProcAddress (hModule=0x761b0000, lpProcName="CryptReleaseContext") returned 0x761cfbc0 [0047.107] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74b70000 [0047.108] GetProcAddress (hModule=0x74b70000, lpProcName="MessageBoxA") returned 0x74bdd740 [0047.108] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74b70000 [0047.108] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74b70000 [0047.108] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74b70000 [0047.108] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74b70000 [0047.109] GetProcAddress (hModule=0x77920000, lpProcName="CoInitializeEx") returned 0x75d32590 [0047.109] GetProcAddress (hModule=0x77920000, lpProcName="CoCreateInstance") returned 0x75cf7490 [0047.109] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x75e90000 [0047.109] GetProcAddress (hModule=0x75e90000, lpProcName="CreateMutexW") returned 0x75efeb70 [0047.110] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="frenchy_shellcode_002") returned 0x38c [0047.110] strlen (_Str="C:\\\\Windows\\\\System32\\\\dllhost.exe") returned 0x22 [0047.110] strlen (_Str="C:\\\\Windows\\\\System32\\\\dllhost.exe") returned 0x22 [0047.110] mbstowcs (in: _Dest=0x4fe118, _Source="C:\\\\Windows\\\\System32\\\\dllhost.exe", _MaxCount=0x23 | out: _Dest="C:\\\\Windows\\\\System32\\\\dllhost.exe") returned 0x22 [0047.110] ExpandEnvironmentStringsW (in: lpSrc="C:\\\\Windows\\\\System32\\\\dllhost.exe", lpDst=0x4fe5f0, nSize=0x104 | out: lpDst="C:\\\\Windows\\\\System32\\\\dllhost.exe") returned 0x23 [0047.110] CreateProcessW (in: lpApplicationName="C:\\\\Windows\\\\System32\\\\dllhost.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x4fe6f8*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x4fe778 | out: lpCommandLine=0x0, lpProcessInformation=0x4fe778*(hProcess=0x394, hThread=0x390, dwProcessId=0xf1c, dwThreadId=0x4a8)) returned 1 [0047.205] NtQueryInformationProcess (in: ProcessHandle=0x394, ProcessInformationClass=0x0, ProcessInformation=0x4fe744, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x4fe744, ReturnLength=0x0) returned 0x0 [0047.205] NtReadVirtualMemory (in: ProcessHandle=0x394, BaseAddress=0x3a8008, Buffer=0x4fe798, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x0 | out: Buffer=0x4fe798*, NumberOfBytesRead=0x0) returned 0x0 [0047.206] NtCreateSection (in: SectionHandle=0x4fe770, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x4fe760, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x4fe770*=0x39c) returned 0x0 [0047.206] NtMapViewOfSection (in: SectionHandle=0x39c, ProcessHandle=0xffffffff, BaseAddress=0x4fe78c*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x4fe768*=0x12000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x4fe78c*=0x4730000, SectionOffset=0x0, ViewSize=0x4fe768*=0x12000) returned 0x0 [0047.206] NtMapViewOfSection (in: SectionHandle=0x39c, ProcessHandle=0x394, BaseAddress=0x4fe788*=0x400000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x4fe76c*=0x12000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x4fe788*=0x400000, SectionOffset=0x0, ViewSize=0x4fe76c*=0x12000) returned 0xc0000018 [0047.207] NtTerminateProcess (ProcessHandle=0x394, ExitStatus=0x0) returned 0x0 [0047.207] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x4730000) returned 0x0 [0047.207] strlen (_Str="C:\\\\Windows\\\\System32\\\\dllhost.exe") returned 0x22 [0047.207] mbstowcs (in: _Dest=0x4fe118, _Source="C:\\\\Windows\\\\System32\\\\dllhost.exe", _MaxCount=0x23 | out: _Dest="C:\\\\Windows\\\\System32\\\\dllhost.exe") returned 0x22 [0047.207] ExpandEnvironmentStringsW (in: lpSrc="C:\\\\Windows\\\\System32\\\\dllhost.exe", lpDst=0x4fe5f0, nSize=0x104 | out: lpDst="C:\\\\Windows\\\\System32\\\\dllhost.exe") returned 0x23 [0047.207] CreateProcessW (in: lpApplicationName="C:\\\\Windows\\\\System32\\\\dllhost.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x4fe6f8*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x4fe778 | out: lpCommandLine=0x0, lpProcessInformation=0x4fe778*(hProcess=0x3a8, hThread=0x398, dwProcessId=0x6cc, dwThreadId=0xe90)) returned 1 [0047.222] NtQueryInformationProcess (in: ProcessHandle=0x3a8, ProcessInformationClass=0x0, ProcessInformation=0x4fe744, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x4fe744, ReturnLength=0x0) returned 0x0 [0047.222] NtReadVirtualMemory (in: ProcessHandle=0x3a8, BaseAddress=0x5b0008, Buffer=0x4fe798, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x0 | out: Buffer=0x4fe798*, NumberOfBytesRead=0x0) returned 0x0 [0047.223] NtCreateSection (in: SectionHandle=0x4fe770, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x4fe760, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x4fe770*=0x3b0) returned 0x0 [0047.223] NtMapViewOfSection (in: SectionHandle=0x3b0, ProcessHandle=0xffffffff, BaseAddress=0x4fe78c*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x4fe768*=0x12000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x4fe78c*=0x4730000, SectionOffset=0x0, ViewSize=0x4fe768*=0x12000) returned 0x0 [0047.223] NtMapViewOfSection (in: SectionHandle=0x3b0, ProcessHandle=0x3a8, BaseAddress=0x4fe788*=0x400000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x4fe76c*=0x12000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x4fe788*=0x400000, SectionOffset=0x0, ViewSize=0x4fe76c*=0x12000) returned 0xc0000018 [0047.223] NtTerminateProcess (ProcessHandle=0x3a8, ExitStatus=0x0) returned 0x0 [0047.224] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x4730000) returned 0x0 [0047.226] strlen (_Str="C:\\\\Windows\\\\System32\\\\dllhost.exe") returned 0x22 [0047.226] mbstowcs (in: _Dest=0x4fe118, _Source="C:\\\\Windows\\\\System32\\\\dllhost.exe", _MaxCount=0x23 | out: _Dest="C:\\\\Windows\\\\System32\\\\dllhost.exe") returned 0x22 [0047.226] ExpandEnvironmentStringsW (in: lpSrc="C:\\\\Windows\\\\System32\\\\dllhost.exe", lpDst=0x4fe5f0, nSize=0x104 | out: lpDst="C:\\\\Windows\\\\System32\\\\dllhost.exe") returned 0x23 [0047.226] CreateProcessW (in: lpApplicationName="C:\\\\Windows\\\\System32\\\\dllhost.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x800000c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x4fe6f8*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x4fe778 | out: lpCommandLine=0x0, lpProcessInformation=0x4fe778*(hProcess=0x3b4, hThread=0x3ac, dwProcessId=0x6c0, dwThreadId=0x9b0)) returned 1 [0047.369] NtQueryInformationProcess (in: ProcessHandle=0x3b4, ProcessInformationClass=0x0, ProcessInformation=0x4fe744, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x4fe744, ReturnLength=0x0) returned 0x0 [0047.369] NtReadVirtualMemory (in: ProcessHandle=0x3b4, BaseAddress=0x2fff008, Buffer=0x4fe798, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x0 | out: Buffer=0x4fe798*, NumberOfBytesRead=0x0) returned 0x0 [0047.369] NtCreateSection (in: SectionHandle=0x4fe770, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x4fe760, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x4fe770*=0x3bc) returned 0x0 [0047.369] NtMapViewOfSection (in: SectionHandle=0x3bc, ProcessHandle=0xffffffff, BaseAddress=0x4fe78c*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x4fe768*=0x12000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x4fe78c*=0x4730000, SectionOffset=0x0, ViewSize=0x4fe768*=0x12000) returned 0x0 [0047.370] NtMapViewOfSection (in: SectionHandle=0x3bc, ProcessHandle=0x3b4, BaseAddress=0x4fe788*=0x400000, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x4fe76c*=0x12000, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x4fe788*=0x400000, SectionOffset=0x0, ViewSize=0x4fe76c*=0x12000) returned 0x0 [0047.371] NtWriteVirtualMemory (in: ProcessHandle=0x3b4, BaseAddress=0x2fff008, Buffer=0x4fe788*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x4fe75c | out: Buffer=0x4fe788*, NumberOfBytesWritten=0x4fe75c*=0x4) returned 0x0 [0047.371] NtGetContextThread (in: ThreadHandle=0x3ac, Context=0x4fe320 | out: Context=0x4fe320*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x2fff000, Edx=0x0, Ecx=0x0, Eax=0xa11850, Ebp=0x0, Eip=0x77c24210, SegCs=0x23, EFlags=0x202, Esp=0x2cef870, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0047.372] NtSetContextThread (ThreadHandle=0x3ac, Context=0x4fe320*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x2fff000, Edx=0x0, Ecx=0x0, Eax=0x402518, Ebp=0x0, Eip=0x77c24210, SegCs=0x23, EFlags=0x202, Esp=0x2cef870, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0047.372] NtResumeThread (in: ThreadHandle=0x3ac, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0 [0047.453] GetProcessId (Process=0x3b4) returned 0x6c0 [0047.454] CoGetContextToken (in: pToken=0x4ffba8 | out: pToken=0x4ffba8) returned 0x0 [0047.454] CObjectContext::QueryInterface () returned 0x0 [0047.454] CObjectContext::GetCurrentThreadType () returned 0x0 [0047.454] Release () returned 0x0 [0047.455] CoGetContextToken (in: pToken=0x4ff8ac | out: pToken=0x4ff8ac) returned 0x0 [0047.455] CObjectContext::QueryInterface () returned 0x0 [0047.455] CObjectContext::GetCurrentThreadType () returned 0x0 [0047.455] Release () returned 0x0 [0047.456] CoGetContextToken (in: pToken=0x4ff8ac | out: pToken=0x4ff8ac) returned 0x0 [0047.456] CObjectContext::QueryInterface () returned 0x0 [0047.456] CObjectContext::GetCurrentThreadType () returned 0x0 [0047.456] Release () returned 0x0 [0047.506] CoGetContextToken (in: pToken=0x4ff8ac | out: pToken=0x4ff8ac) returned 0x0 [0047.506] CObjectContext::QueryInterface () returned 0x0 [0047.506] CObjectContext::GetCurrentThreadType () returned 0x0 [0047.506] Release () returned 0x0 [0047.507] CoGetContextToken (in: pToken=0x4ff8cc | out: pToken=0x4ff8cc) returned 0x0 [0047.507] CObjectContext::QueryInterface () returned 0x0 [0047.507] CObjectContext::GetCurrentThreadType () returned 0x0 [0047.507] Release () returned 0x0 [0047.508] CoUninitialize () Thread: id = 2 os_tid = 0xd04 Thread: id = 3 os_tid = 0xd4c Thread: id = 4 os_tid = 0xd54 [0039.849] CoGetContextToken (in: pToken=0x43cf894 | out: pToken=0x43cf894) returned 0x0 [0039.849] CObjectContext::QueryInterface () returned 0x0 [0039.849] CObjectContext::GetCurrentThreadType () returned 0x0 [0039.849] Release () returned 0x0 [0039.849] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0039.849] RoInitialize () returned 0x1 [0039.849] RoUninitialize () returned 0x0 [0047.456] EtwEventUnregister (RegHandle=0x565638) returned 0x0 [0047.497] CloseHandle (hObject=0x374) returned 1 [0047.506] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Process: id = "2" image_name = "dllhost.exe" filename = "c:\\windows\\syswow64\\dllhost.exe" page_root = "0xeb5d000" os_pid = "0xf1c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x9d8" cmd_line = "\"C:\\\\Windows\\\\System32\\\\dllhost.exe\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 5 os_tid = 0x4a8 Process: id = "3" image_name = "dllhost.exe" filename = "c:\\windows\\syswow64\\dllhost.exe" page_root = "0xeb63000" os_pid = "0x6cc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x9d8" cmd_line = "\"C:\\\\Windows\\\\System32\\\\dllhost.exe\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 6 os_tid = 0xe90 Process: id = "4" image_name = "dllhost.exe" filename = "c:\\windows\\syswow64\\dllhost.exe" page_root = "0xeee4000" os_pid = "0x6c0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x9d8" cmd_line = "\"C:\\\\Windows\\\\System32\\\\dllhost.exe\"" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 7 os_tid = 0x9b0 [0048.219] GetProcessHeap () returned 0x3150000 [0048.219] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x30) returned 0x3166198 [0048.219] GetProcessHeap () returned 0x3150000 [0048.219] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x33c0) returned 0x31668c8 [0048.236] GetProcessHeap () returned 0x3150000 [0048.236] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x204) returned 0x3169c90 [0048.236] GetProcessHeap () returned 0x3150000 [0048.236] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x315ab68 [0048.249] GetTickCount () returned 0x114c8fe [0048.249] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x2cef668 | out: lpWSAData=0x2cef668) returned 0 [0048.253] GetLocaleInfoW (in: Locale=0x800, LCType=0x58, lpLCData=0x2cef648, cchData=32 | out: lpLCData="\x03") returned 16 [0048.254] GetProcessHeap () returned 0x3150000 [0048.254] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1c) returned 0x31549c0 [0048.254] GetProcessHeap () returned 0x3150000 [0048.254] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1c) returned 0x315ac38 [0048.254] GetVersion () returned 0x3ad7000a [0048.254] GetCurrentProcess () returned 0xffffffff [0048.254] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x2cef5bc | out: TokenHandle=0x2cef5bc*=0x1f0) returned 1 [0048.254] GetTokenInformation (in: TokenHandle=0x1f0, TokenInformationClass=0x14, TokenInformation=0x2cef5b4, TokenInformationLength=0x4, ReturnLength=0x2cef5b8 | out: TokenInformation=0x2cef5b4, ReturnLength=0x2cef5b8) returned 1 [0048.254] CloseHandle (hObject=0x1f0) returned 1 [0048.256] GetProcessHeap () returned 0x3150000 [0048.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x31542f0 [0048.256] GetProcessHeap () returned 0x3150000 [0048.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x3152b58 [0048.256] GetProcessHeap () returned 0x3150000 [0048.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x315b188 [0048.256] GetProcessHeap () returned 0x3150000 [0048.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0048.256] GetProcessHeap () returned 0x3150000 [0048.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0048.256] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x3152b58, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0048.256] GetProcessHeap () returned 0x3150000 [0048.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315b188 | out: hHeap=0x3150000) returned 1 [0048.256] GetProcessHeap () returned 0x3150000 [0048.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31542f0 | out: hHeap=0x3150000) returned 1 [0048.256] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2cef55c, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2cef55c*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0048.256] GetProcessHeap () returned 0x3150000 [0048.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3152b58 | out: hHeap=0x3150000) returned 1 [0048.256] GetProcessHeap () returned 0x3150000 [0048.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x315dc68 [0048.256] GetProcessHeap () returned 0x3150000 [0048.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x315dd88 [0048.256] GetProcessHeap () returned 0x3150000 [0048.256] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x315dd88, Size=0x72) returned 0x3154708 [0048.256] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000001") returned 0x0 [0048.257] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000001") returned 0x1f0 [0048.257] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x0 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315dc68 | out: hHeap=0x3150000) returned 1 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3154708 | out: hHeap=0x3150000) returned 1 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x3152b58 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x31542f0 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x315b188 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0048.257] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x31542f0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315b188 | out: hHeap=0x3150000) returned 1 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3152b58 | out: hHeap=0x3150000) returned 1 [0048.257] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2cef544, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2cef544*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31542f0 | out: hHeap=0x3150000) returned 1 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x315dbd8 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x315dc20 [0048.257] GetProcessHeap () returned 0x3150000 [0048.257] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x315dc20, Size=0x72) returned 0x316e728 [0048.258] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0048.258] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x1f4 [0048.258] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0x0) returned 0x0 [0048.258] GetProcessHeap () returned 0x3150000 [0048.258] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315dbd8 | out: hHeap=0x3150000) returned 1 [0048.258] GetProcessHeap () returned 0x3150000 [0048.258] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316e728 | out: hHeap=0x3150000) returned 1 [0048.258] ReleaseMutex (hMutex=0x1f4) returned 1 [0048.258] CloseHandle (hObject=0x1f4) returned 1 [0048.258] GetProcessHeap () returned 0x3150000 [0048.258] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x30) returned 0x3166358 [0048.258] GetProcessHeap () returned 0x3150000 [0048.258] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20a) returned 0x316f408 [0048.258] GetVersion () returned 0x3ad7000a [0048.258] GetProcessHeap () returned 0x3150000 [0048.258] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x50) returned 0x3154708 [0048.258] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0048.258] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0048.259] Wow64DisableWow64FsRedirection (in: OldValue=0x2cef598 | out: OldValue=0x2cef598*=0x0) returned 1 [0048.259] GetProcessHeap () returned 0x3150000 [0048.259] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3154708 | out: hHeap=0x3150000) returned 1 [0048.259] GetModuleHandleA (lpModuleName="advapi32.dll") returned 0x761b0000 [0048.259] GetProcAddress (hModule=0x761b0000, lpProcName="CreateProcessWithTokenW") returned 0x761c0c70 [0048.259] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x316f408, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\dllhost.exe" (normalized: "c:\\windows\\syswow64\\dllhost.exe")) returned 0x1f [0048.259] GetShellWindow () returned 0x100f0 [0048.259] GetWindowThreadProcessId (in: hWnd=0x100f0, lpdwProcessId=0x2cef5a4 | out: lpdwProcessId=0x2cef5a4) returned 0x864 [0048.259] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x860) returned 0x1f4 [0048.259] OpenProcessToken (in: ProcessHandle=0x1f4, DesiredAccess=0x2000000, TokenHandle=0x2cef5b4 | out: TokenHandle=0x2cef5b4*=0x1f8) returned 1 [0048.260] DuplicateTokenEx (in: hExistingToken=0x1f8, dwDesiredAccess=0x2000000, lpTokenAttributes=0x2cef57c, ImpersonationLevel=0x2, TokenType=0x1, phNewToken=0x2cef5b8 | out: phNewToken=0x2cef5b8*=0x1fc) returned 1 [0048.260] CreateProcessWithTokenW (in: hToken=0x1fc, dwLogonFlags=0x0, lpApplicationName="C:\\Windows\\SysWOW64\\dllhost.exe", lpCommandLine=0x0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2cef530*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2cef588 | out: lpCommandLine=0x0, lpProcessInformation=0x2cef588*(hProcess=0x220, hThread=0x224, dwProcessId=0x15c, dwThreadId=0x4a0)) returned 1 [0048.424] GetProcessHeap () returned 0x3150000 [0048.424] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x50) returned 0x3170c20 [0048.424] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0048.424] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x75ea6b50 [0048.424] Wow64RevertWow64FsRedirection (OlValue=0x0) returned 1 [0048.424] GetProcessHeap () returned 0x3150000 [0048.424] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170c20 | out: hHeap=0x3150000) returned 1 [0048.424] CloseHandle (hObject=0x1f4) returned 1 [0048.424] CloseHandle (hObject=0x220) returned 1 [0048.424] CloseHandle (hObject=0x224) returned 1 [0048.424] CloseHandle (hObject=0x1f8) returned 1 [0048.424] CloseHandle (hObject=0x1fc) returned 1 [0048.424] GetProcessHeap () returned 0x3150000 [0048.425] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f408 | out: hHeap=0x3150000) returned 1 [0048.425] GetProcessHeap () returned 0x3150000 [0048.425] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3166358 | out: hHeap=0x3150000) returned 1 [0048.425] Sleep (dwMilliseconds=0x1388) [0053.487] GetProcessHeap () returned 0x3150000 [0053.487] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x60) returned 0x3154588 [0053.488] GetProcessHeap () returned 0x3150000 [0053.488] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x316fad8 [0053.488] GetProcessHeap () returned 0x3150000 [0053.488] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x316fc68 [0053.488] GetProcessHeap () returned 0x3150000 [0053.488] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x316fc90 [0053.488] GetProcessHeap () returned 0x3150000 [0053.488] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.488] GetProcessHeap () returned 0x3150000 [0053.488] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.488] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x316fc68, nSize=0xf | out: lpDst="") returned 0x1e [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fc90 | out: hHeap=0x3150000) returned 1 [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x316fc68, Size=0x3a) returned 0x315db90 [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x3a) returned 0x315dea8 [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.489] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x315db90, nSize=0x1d | out: lpDst="") returned 0x1e [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315dea8 | out: hHeap=0x3150000) returned 1 [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x315db90, Size=0x72) returned 0x316f2a8 [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x72) returned 0x316e6a8 [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.489] ExpandEnvironmentStringsW (in: lpSrc="%localappdata%", lpDst=0x316f2a8, nSize=0x39 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1e [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316e6a8 | out: hHeap=0x3150000) returned 1 [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fad8 | out: hHeap=0x3150000) returned 1 [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x315dc20 [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3e) returned 0x315db00 [0053.489] GetProcessHeap () returned 0x3150000 [0053.489] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x3e) returned 0x315db90 [0053.489] GetProcessHeap () returned 0x3150000 [0053.490] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.490] GetProcessHeap () returned 0x3150000 [0053.490] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x10) returned 0x3171100 [0053.490] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2cef49c | out: phkResult=0x2cef49c*=0x1f8) returned 0x0 [0053.491] RegQueryValueExW (in: hKey=0x1f8, lpValueName="Startup", lpReserved=0x0, lpType=0x2cef498, lpData=0x315db90, lpcbData=0x2cef4a0*=0x3e | out: lpType=0x2cef498*=0x2, lpData=0x315db90*=0x25, lpcbData=0x2cef4a0*=0x98) returned 0xea [0053.491] RegCloseKey (hKey=0x1f8) returned 0x0 [0053.491] GetProcessHeap () returned 0x3150000 [0053.491] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3171100 | out: hHeap=0x3150000) returned 1 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315db90 | out: hHeap=0x3150000) returned 1 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x315db00, Size=0x7a) returned 0x3152df8 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x7a) returned 0x31548b8 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x3158718 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x10) returned 0x31711c0 [0053.492] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2cef49c | out: phkResult=0x2cef49c*=0x1f8) returned 0x0 [0053.492] RegQueryValueExW (in: hKey=0x1f8, lpValueName="Startup", lpReserved=0x0, lpType=0x2cef498, lpData=0x31548b8, lpcbData=0x2cef4a0*=0x7a | out: lpType=0x2cef498*=0x2, lpData=0x31548b8*=0x18, lpcbData=0x2cef4a0*=0x98) returned 0xea [0053.492] RegCloseKey (hKey=0x1f8) returned 0x0 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31711c0 | out: hHeap=0x3150000) returned 1 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3158718 | out: hHeap=0x3150000) returned 1 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3152df8, Size=0xf2) returned 0x3158ee0 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0xf2) returned 0x3158cc8 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.492] GetProcessHeap () returned 0x3150000 [0053.492] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x10) returned 0x3171148 [0053.492] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2cef49c | out: phkResult=0x2cef49c*=0x1f8) returned 0x0 [0053.492] RegQueryValueExW (in: hKey=0x1f8, lpValueName="Startup", lpReserved=0x0, lpType=0x2cef498, lpData=0x3158cc8, lpcbData=0x2cef4a0*=0xf2 | out: lpType=0x2cef498*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x2cef4a0*=0x98) returned 0x0 [0053.493] RegCloseKey (hKey=0x1f8) returned 0x0 [0053.493] GetProcessHeap () returned 0x3150000 [0053.493] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3171148 | out: hHeap=0x3150000) returned 1 [0053.493] GetProcessHeap () returned 0x3150000 [0053.493] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x316fd30 [0053.493] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2cef49c | out: phkResult=0x2cef49c*=0x1f8) returned 0x0 [0053.493] RegQueryValueExW (in: hKey=0x1f8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x2cef498, lpData=0x3158d60, lpcbData=0x2cef4a0*=0x5a | out: lpType=0x2cef498*=0x0, lpData=0x3158d60*=0x1a, lpcbData=0x2cef4a0*=0x5a) returned 0x2 [0053.493] RegCloseKey (hKey=0x1f8) returned 0x0 [0053.493] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2cef4b0 | out: phkResult=0x2cef4b0*=0x1f8) returned 0x0 [0053.493] RegQueryValueExW (in: hKey=0x1f8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x2cef4ac, lpData=0x3158d60, lpcbData=0x2cef4b4*=0x5a | out: lpType=0x2cef4ac*=0x2, lpData=0x3158d60*=0x1a, lpcbData=0x2cef4b4*=0x78) returned 0xea [0053.493] RegCloseKey (hKey=0x1f8) returned 0x0 [0053.493] GetProcessHeap () returned 0x3150000 [0053.493] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fd30 | out: hHeap=0x3150000) returned 1 [0053.493] GetProcessHeap () returned 0x3150000 [0053.493] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.493] GetProcessHeap () returned 0x3150000 [0053.493] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3158cc8 | out: hHeap=0x3150000) returned 1 [0053.493] GetProcessHeap () returned 0x3150000 [0053.493] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3158ee0, Size=0x1e2) returned 0x316f408 [0053.493] GetProcessHeap () returned 0x3150000 [0053.493] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e2) returned 0x316f5f8 [0053.493] GetProcessHeap () returned 0x3150000 [0053.493] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.493] GetProcessHeap () returned 0x3150000 [0053.493] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x10) returned 0x3171130 [0053.493] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2cef49c | out: phkResult=0x2cef49c*=0x1f8) returned 0x0 [0053.493] RegQueryValueExW (in: hKey=0x1f8, lpValueName="Startup", lpReserved=0x0, lpType=0x2cef498, lpData=0x316f5f8, lpcbData=0x2cef4a0*=0x1e2 | out: lpType=0x2cef498*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x2cef4a0*=0x98) returned 0x0 [0053.494] RegCloseKey (hKey=0x1f8) returned 0x0 [0053.494] GetProcessHeap () returned 0x3150000 [0053.494] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3171130 | out: hHeap=0x3150000) returned 1 [0053.494] GetProcessHeap () returned 0x3150000 [0053.494] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x316fc90 [0053.494] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2cef49c | out: phkResult=0x2cef49c*=0x1f8) returned 0x0 [0053.494] RegQueryValueExW (in: hKey=0x1f8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x2cef498, lpData=0x316f690, lpcbData=0x2cef4a0*=0x14a | out: lpType=0x2cef498*=0x0, lpData=0x316f690*=0x0, lpcbData=0x2cef4a0*=0x14a) returned 0x2 [0053.494] RegCloseKey (hKey=0x1f8) returned 0x0 [0053.494] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x2cef4b0 | out: phkResult=0x2cef4b0*=0x1f8) returned 0x0 [0053.494] RegQueryValueExW (in: hKey=0x1f8, lpValueName="Common Startup", lpReserved=0x0, lpType=0x2cef4ac, lpData=0x316f690, lpcbData=0x2cef4b4*=0x14a | out: lpType=0x2cef4ac*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x2cef4b4*=0x78) returned 0x0 [0053.494] RegCloseKey (hKey=0x1f8) returned 0x0 [0053.494] GetProcessHeap () returned 0x3150000 [0053.494] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fc90 | out: hHeap=0x3150000) returned 1 [0053.494] GetProcessHeap () returned 0x3150000 [0053.494] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.494] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpDst=0x316f408, nSize=0xf1 | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup;C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x8b [0053.494] GetProcessHeap () returned 0x3150000 [0053.494] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f5f8 | out: hHeap=0x3150000) returned 1 [0053.494] GetProcessHeap () returned 0x3150000 [0053.494] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315dc20 | out: hHeap=0x3150000) returned 1 [0053.494] GetProcessHeap () returned 0x3150000 [0053.494] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20a) returned 0x316f5f8 [0053.494] GetProcessHeap () returned 0x3150000 [0053.494] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20a) returned 0x316fe40 [0053.494] GetProcessHeap () returned 0x3150000 [0053.494] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20a) returned 0x3170058 [0053.494] GetProcessHeap () returned 0x3150000 [0053.494] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20a) returned 0x31733c8 [0053.494] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x316f5f8, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\dllhost.exe" (normalized: "c:\\windows\\syswow64\\dllhost.exe")) returned 0x1f [0053.495] GetProcessHeap () returned 0x3150000 [0053.495] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20a) returned 0x31735e0 [0053.495] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x31735e0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\dllhost.exe" (normalized: "c:\\windows\\syswow64\\dllhost.exe")) returned 0x1f [0053.495] GetProcessHeap () returned 0x3150000 [0053.495] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31735e0 | out: hHeap=0x3150000) returned 1 [0053.495] GetProcessHeap () returned 0x3150000 [0053.495] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20a) returned 0x31735e0 [0053.495] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x31735e0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\dllhost.exe" (normalized: "c:\\windows\\syswow64\\dllhost.exe")) returned 0x1f [0053.495] GetProcessHeap () returned 0x3150000 [0053.495] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31735e0 | out: hHeap=0x3150000) returned 1 [0053.495] CopyFileW (lpExistingFileName="C:\\Windows\\SysWOW64\\dllhost.exe" (normalized: "c:\\windows\\syswow64\\dllhost.exe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\dllhost.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\dllhost.exe"), bFailIfExists=0) returned 1 [0053.833] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x2cef598 | out: phkResult=0x2cef598*=0x1f8) returned 0x0 [0053.834] RegSetValueExW (in: hKey=0x1f8, lpValueName="dllhost", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\dllhost.exe", cbData=0x52 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\dllhost.exe") returned 0x0 [0053.834] RegCloseKey (hKey=0x1f8) returned 0x0 [0053.834] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x2cef594 | out: phkResult=0x2cef594*=0x1f8) returned 0x0 [0053.834] RegSetValueExW (in: hKey=0x1f8, lpValueName="dllhost", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Local\\dllhost.exe", cbData=0x52 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Local\\dllhost.exe") returned 0x0 [0053.835] RegCloseKey (hKey=0x1f8) returned 0x0 [0053.835] GetProcessHeap () returned 0x3150000 [0053.835] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x118) returned 0x315a670 [0053.835] CopyFileW (lpExistingFileName="C:\\Windows\\SysWOW64\\dllhost.exe" (normalized: "c:\\windows\\syswow64\\dllhost.exe"), lpNewFileName="c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\dllhost.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\dllhost.exe"), bFailIfExists=1) returned 1 [0053.839] CopyFileW (lpExistingFileName="C:\\Windows\\SysWOW64\\dllhost.exe" (normalized: "c:\\windows\\syswow64\\dllhost.exe"), lpNewFileName="c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dllhost.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dllhost.exe"), bFailIfExists=1) returned 1 [0053.846] GetProcessHeap () returned 0x3150000 [0053.846] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315a670 | out: hHeap=0x3150000) returned 1 [0053.846] GetProcessHeap () returned 0x3150000 [0053.846] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f5f8 | out: hHeap=0x3150000) returned 1 [0053.846] GetProcessHeap () returned 0x3150000 [0053.846] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fe40 | out: hHeap=0x3150000) returned 1 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170058 | out: hHeap=0x3150000) returned 1 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31733c8 | out: hHeap=0x3150000) returned 1 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3154588 | out: hHeap=0x3150000) returned 1 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f2a8 | out: hHeap=0x3150000) returned 1 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f408 | out: hHeap=0x3150000) returned 1 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x316fdf8 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x316fd80 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x316fda8 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.847] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x316fd80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fda8 | out: hHeap=0x3150000) returned 1 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fdf8 | out: hHeap=0x3150000) returned 1 [0053.847] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2cef5b4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2cef5b4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fd80 | out: hHeap=0x3150000) returned 1 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x28) returned 0x3160460 [0053.847] GetProcessHeap () returned 0x3150000 [0053.847] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3171130 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x60) returned 0x3154588 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x5a) returned 0x3154138 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3154138, Size=0xb2) returned 0x315b648 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3171178 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x180) returned 0x316f408 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x250) returned 0x316f590 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x84) returned 0x3158718 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x84) returned 0x315b760 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x315a320 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315a320 | out: hHeap=0x3150000) returned 1 [0053.848] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x3158718, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315b760 | out: hHeap=0x3150000) returned 1 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0xc0) returned 0x315b760 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0xb8) returned 0x315a320 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0xb8) returned 0x315a1e8 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.848] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;", lpDst=0x315a320, nSize=0x5c | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;") returned 0x5c [0053.848] GetProcessHeap () returned 0x3150000 [0053.848] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315a1e8 | out: hHeap=0x3150000) returned 1 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315b760 | out: hHeap=0x3150000) returned 1 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20a) returned 0x316fe40 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20a) returned 0x3170058 [0053.849] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3170058, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\dllhost.exe" (normalized: "c:\\windows\\syswow64\\dllhost.exe")) returned 0x1f [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170058 | out: hHeap=0x3150000) returned 1 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x174) returned 0x3170058 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3170058, Size=0x3be) returned 0x3170058 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x86) returned 0x31548b8 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x31548b8, Size=0x9e) returned 0x315b760 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0xba) returned 0x315a1e8 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fe40 | out: hHeap=0x3150000) returned 1 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f408 | out: hHeap=0x3150000) returned 1 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f590 | out: hHeap=0x3150000) returned 1 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3158718 | out: hHeap=0x3150000) returned 1 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315a320 | out: hHeap=0x3150000) returned 1 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3171130 | out: hHeap=0x3150000) returned 1 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3154588 | out: hHeap=0x3150000) returned 1 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x316fc40 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x316fd30 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x316fd80 [0053.849] GetProcessHeap () returned 0x3150000 [0053.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.850] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x316fd30, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fd80 | out: hHeap=0x3150000) returned 1 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fc40 | out: hHeap=0x3150000) returned 1 [0053.850] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x2cef5b4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2cef5b4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fd30 | out: hHeap=0x3150000) returned 1 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x28) returned 0x31606d0 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x31711c0 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x60) returned 0x3154588 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x5a) returned 0x3154138 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3154138, Size=0xb2) returned 0x315a320 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3171100 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x180) returned 0x316fe40 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x250) returned 0x316f408 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x84) returned 0x316ffc8 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x84) returned 0x3158718 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x315b3d0 [0053.850] GetProcessHeap () returned 0x3150000 [0053.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315b3d0 | out: hHeap=0x3150000) returned 1 [0053.851] ExpandEnvironmentStringsW (in: lpSrc="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys", lpDst=0x316ffc8, nSize=0x42 | out: lpDst="info.hta;info.txt;boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys") returned 0x42 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3158718 | out: hHeap=0x3150000) returned 1 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0xc0) returned 0x315b3d0 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0xb8) returned 0x3158ee0 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0xb8) returned 0x3158cc8 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.851] ExpandEnvironmentStringsW (in: lpSrc="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;", lpDst=0x3158ee0, nSize=0x5c | out: lpDst="C:\\Windows;C:\\ProgramData\\microsoft\\windows\\caches;C:\\Users\\admin\\microsoft\\windows\\caches;") returned 0x5c [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3158cc8 | out: hHeap=0x3150000) returned 1 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315b3d0 | out: hHeap=0x3150000) returned 1 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20a) returned 0x31733c8 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20a) returned 0x31735e0 [0053.851] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x31735e0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\dllhost.exe" (normalized: "c:\\windows\\syswow64\\dllhost.exe")) returned 0x1f [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31735e0 | out: hHeap=0x3150000) returned 1 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x174) returned 0x316f660 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x24e) returned 0x31735e0 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x86) returned 0x31548b8 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x31548b8, Size=0x9e) returned 0x3158718 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0xba) returned 0x315b3d0 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31733c8 | out: hHeap=0x3150000) returned 1 [0053.851] GetProcessHeap () returned 0x3150000 [0053.851] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fe40 | out: hHeap=0x3150000) returned 1 [0053.852] GetProcessHeap () returned 0x3150000 [0053.852] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f408 | out: hHeap=0x3150000) returned 1 [0053.852] GetProcessHeap () returned 0x3150000 [0053.852] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316ffc8 | out: hHeap=0x3150000) returned 1 [0053.852] GetProcessHeap () returned 0x3150000 [0053.852] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3158ee0 | out: hHeap=0x3150000) returned 1 [0053.852] GetProcessHeap () returned 0x3150000 [0053.852] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31711c0 | out: hHeap=0x3150000) returned 1 [0053.852] GetProcessHeap () returned 0x3150000 [0053.852] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3154588 | out: hHeap=0x3150000) returned 1 [0053.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x402013, lpParameter=0x2cef5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8 [0053.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401fab, lpParameter=0x2cef5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224 [0053.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401e4e, lpParameter=0x2cef5fc, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x240 [0053.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x401859, lpParameter=0x2cef5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c [0054.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40197c, lpParameter=0x2cef5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x260 [0054.266] WaitForSingleObject (hHandle=0x25c, dwMilliseconds=0xffffffff) Thread: id = 8 os_tid = 0x90c Thread: id = 9 os_tid = 0xa9c Thread: id = 12 os_tid = 0x4d0 [0053.884] GetVersion () returned 0x3ad7000a [0053.884] GetCurrentProcess () returned 0xffffffff [0053.884] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x310fe24 | out: TokenHandle=0x310fe24*=0x244) returned 1 [0053.884] GetTokenInformation (in: TokenHandle=0x244, TokenInformationClass=0x14, TokenInformation=0x310fe1c, TokenInformationLength=0x4, ReturnLength=0x310fe20 | out: TokenInformation=0x310fe1c, ReturnLength=0x310fe20) returned 1 [0053.884] CloseHandle (hObject=0x244) returned 1 [0053.884] GetProcessHeap () returned 0x3150000 [0053.884] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x316fce0 [0053.884] GetProcessHeap () returned 0x3150000 [0053.884] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x316fc40 [0053.884] GetProcessHeap () returned 0x3150000 [0053.884] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x316fb00 [0053.884] GetProcessHeap () returned 0x3150000 [0053.885] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x31548b8 [0053.885] GetProcessHeap () returned 0x3150000 [0053.885] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31548b8 | out: hHeap=0x3150000) returned 1 [0053.885] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x316fc40, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0053.885] GetProcessHeap () returned 0x3150000 [0053.885] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fb00 | out: hHeap=0x3150000) returned 1 [0053.885] GetProcessHeap () returned 0x3150000 [0053.885] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fce0 | out: hHeap=0x3150000) returned 1 [0053.885] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0053.885] GetProcessHeap () returned 0x3150000 [0053.885] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fc40 | out: hHeap=0x3150000) returned 1 [0053.885] GetProcessHeap () returned 0x3150000 [0053.885] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x315ddd0 [0053.885] GetProcessHeap () returned 0x3150000 [0053.885] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x315db00 [0053.885] GetProcessHeap () returned 0x3150000 [0053.885] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x315db00, Size=0x72) returned 0x316eb28 [0053.885] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0053.885] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x244 [0053.886] WaitForSingleObject (hHandle=0x244, dwMilliseconds=0x0) returned 0x0 [0053.886] GetProcessHeap () returned 0x3150000 [0053.886] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315ddd0 | out: hHeap=0x3150000) returned 1 [0053.886] GetProcessHeap () returned 0x3150000 [0053.886] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316eb28 | out: hHeap=0x3150000) returned 1 [0053.886] ReleaseMutex (hMutex=0x244) returned 1 [0053.886] CloseHandle (hObject=0x244) returned 1 [0053.886] Sleep (dwMilliseconds=0x3e8) [0055.019] GetProcessHeap () returned 0x3150000 [0055.019] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x316fd30 [0055.019] GetProcessHeap () returned 0x3150000 [0055.019] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x316fdf8 [0055.019] GetProcessHeap () returned 0x3150000 [0055.019] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x316fa88 [0055.019] GetProcessHeap () returned 0x3150000 [0055.020] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318aee0 [0055.020] GetProcessHeap () returned 0x3150000 [0055.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318aee0 | out: hHeap=0x3150000) returned 1 [0055.020] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x316fdf8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0055.020] GetProcessHeap () returned 0x3150000 [0055.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fa88 | out: hHeap=0x3150000) returned 1 [0055.020] GetProcessHeap () returned 0x3150000 [0055.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fd30 | out: hHeap=0x3150000) returned 1 [0055.020] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0055.020] GetProcessHeap () returned 0x3150000 [0055.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fdf8 | out: hHeap=0x3150000) returned 1 [0055.020] GetProcessHeap () returned 0x3150000 [0055.020] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x315dc68 [0055.020] GetProcessHeap () returned 0x3150000 [0055.020] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x315de18 [0055.020] GetProcessHeap () returned 0x3150000 [0055.020] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x315de18, Size=0x72) returned 0x316efa8 [0055.020] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0055.020] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x280 [0055.020] WaitForSingleObject (hHandle=0x280, dwMilliseconds=0x0) returned 0x0 [0055.020] GetProcessHeap () returned 0x3150000 [0055.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315dc68 | out: hHeap=0x3150000) returned 1 [0055.020] GetProcessHeap () returned 0x3150000 [0055.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316efa8 | out: hHeap=0x3150000) returned 1 [0055.020] ReleaseMutex (hMutex=0x280) returned 1 [0055.020] CloseHandle (hObject=0x280) returned 1 [0055.021] Sleep (dwMilliseconds=0x3e8) [0056.432] GetProcessHeap () returned 0x3150000 [0056.432] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x316fd80 [0056.432] GetProcessHeap () returned 0x3150000 [0056.432] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x316fa88 [0056.432] GetProcessHeap () returned 0x3150000 [0056.432] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x316fda8 [0056.432] GetProcessHeap () returned 0x3150000 [0056.432] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318a728 [0056.432] GetProcessHeap () returned 0x3150000 [0056.432] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318a728 | out: hHeap=0x3150000) returned 1 [0056.432] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x316fa88, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0056.432] GetProcessHeap () returned 0x3150000 [0056.432] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fda8 | out: hHeap=0x3150000) returned 1 [0056.432] GetProcessHeap () returned 0x3150000 [0056.432] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fd80 | out: hHeap=0x3150000) returned 1 [0056.432] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0056.433] GetProcessHeap () returned 0x3150000 [0056.433] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fa88 | out: hHeap=0x3150000) returned 1 [0056.433] GetProcessHeap () returned 0x3150000 [0056.433] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218878 [0056.433] GetProcessHeap () returned 0x3150000 [0056.433] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218d40 [0056.433] GetProcessHeap () returned 0x3150000 [0056.433] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218d40, Size=0x72) returned 0x316e9a8 [0056.433] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0056.433] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x320 [0056.433] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x0) returned 0x0 [0056.433] GetProcessHeap () returned 0x3150000 [0056.433] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218878 | out: hHeap=0x3150000) returned 1 [0056.433] GetProcessHeap () returned 0x3150000 [0056.433] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316e9a8 | out: hHeap=0x3150000) returned 1 [0056.433] ReleaseMutex (hMutex=0x320) returned 1 [0056.433] CloseHandle (hObject=0x320) returned 1 [0056.433] Sleep (dwMilliseconds=0x3e8) [0057.627] GetProcessHeap () returned 0x3150000 [0057.627] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c100 [0057.627] GetProcessHeap () returned 0x3150000 [0057.627] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c150 [0057.627] GetProcessHeap () returned 0x3150000 [0057.627] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c380 [0057.627] GetProcessHeap () returned 0x3150000 [0057.627] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318ac80 [0057.627] GetProcessHeap () returned 0x3150000 [0057.627] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318ac80 | out: hHeap=0x3150000) returned 1 [0057.627] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c150, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0057.627] GetProcessHeap () returned 0x3150000 [0057.627] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c380 | out: hHeap=0x3150000) returned 1 [0057.627] GetProcessHeap () returned 0x3150000 [0057.627] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c100 | out: hHeap=0x3150000) returned 1 [0057.627] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0057.628] GetProcessHeap () returned 0x3150000 [0057.628] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c150 | out: hHeap=0x3150000) returned 1 [0057.628] GetProcessHeap () returned 0x3150000 [0057.628] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x32187e8 [0057.628] GetProcessHeap () returned 0x3150000 [0057.628] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218cb0 [0057.628] GetProcessHeap () returned 0x3150000 [0057.628] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218cb0, Size=0x72) returned 0x316ed28 [0057.628] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0057.628] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x348 [0057.628] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x0 [0057.628] GetProcessHeap () returned 0x3150000 [0057.628] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x32187e8 | out: hHeap=0x3150000) returned 1 [0057.628] GetProcessHeap () returned 0x3150000 [0057.628] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316ed28 | out: hHeap=0x3150000) returned 1 [0057.628] ReleaseMutex (hMutex=0x348) returned 1 [0057.628] CloseHandle (hObject=0x348) returned 1 [0057.628] Sleep (dwMilliseconds=0x3e8) [0058.868] GetProcessHeap () returned 0x3150000 [0058.868] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c100 [0058.868] GetProcessHeap () returned 0x3150000 [0058.868] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c1c8 [0058.868] GetProcessHeap () returned 0x3150000 [0058.868] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c308 [0058.868] GetProcessHeap () returned 0x3150000 [0058.868] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318ae48 [0058.868] GetProcessHeap () returned 0x3150000 [0058.868] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318ae48 | out: hHeap=0x3150000) returned 1 [0058.868] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c1c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0058.869] GetProcessHeap () returned 0x3150000 [0058.869] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c308 | out: hHeap=0x3150000) returned 1 [0058.869] GetProcessHeap () returned 0x3150000 [0058.869] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c100 | out: hHeap=0x3150000) returned 1 [0058.869] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0058.869] GetProcessHeap () returned 0x3150000 [0058.869] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c1c8 | out: hHeap=0x3150000) returned 1 [0058.869] GetProcessHeap () returned 0x3150000 [0058.869] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218cb0 [0058.869] GetProcessHeap () returned 0x3150000 [0058.869] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x32187e8 [0058.869] GetProcessHeap () returned 0x3150000 [0058.869] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x32187e8, Size=0x72) returned 0x316e628 [0058.869] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0058.869] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x364 [0058.869] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0x0) returned 0x0 [0058.869] GetProcessHeap () returned 0x3150000 [0058.869] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218cb0 | out: hHeap=0x3150000) returned 1 [0058.870] GetProcessHeap () returned 0x3150000 [0058.870] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316e628 | out: hHeap=0x3150000) returned 1 [0058.870] ReleaseMutex (hMutex=0x364) returned 1 [0058.870] CloseHandle (hObject=0x364) returned 1 [0058.870] Sleep (dwMilliseconds=0x3e8) [0060.045] GetProcessHeap () returned 0x3150000 [0060.045] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c088 [0060.045] GetProcessHeap () returned 0x3150000 [0060.045] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c178 [0060.045] GetProcessHeap () returned 0x3150000 [0060.045] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c150 [0060.045] GetProcessHeap () returned 0x3150000 [0060.045] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318a988 [0060.045] GetProcessHeap () returned 0x3150000 [0060.045] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318a988 | out: hHeap=0x3150000) returned 1 [0060.045] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c178, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0060.045] GetProcessHeap () returned 0x3150000 [0060.045] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c150 | out: hHeap=0x3150000) returned 1 [0060.045] GetProcessHeap () returned 0x3150000 [0060.045] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c088 | out: hHeap=0x3150000) returned 1 [0060.045] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0060.046] GetProcessHeap () returned 0x3150000 [0060.046] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c178 | out: hHeap=0x3150000) returned 1 [0060.046] GetProcessHeap () returned 0x3150000 [0060.046] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218cb0 [0060.046] GetProcessHeap () returned 0x3150000 [0060.046] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218bd8 [0060.046] GetProcessHeap () returned 0x3150000 [0060.046] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218bd8, Size=0x72) returned 0x316f228 [0060.046] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0060.046] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x33c [0060.046] WaitForSingleObject (hHandle=0x33c, dwMilliseconds=0x0) returned 0x0 [0060.046] GetProcessHeap () returned 0x3150000 [0060.046] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218cb0 | out: hHeap=0x3150000) returned 1 [0060.046] GetProcessHeap () returned 0x3150000 [0060.046] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f228 | out: hHeap=0x3150000) returned 1 [0060.046] ReleaseMutex (hMutex=0x33c) returned 1 [0060.046] CloseHandle (hObject=0x33c) returned 1 [0060.046] Sleep (dwMilliseconds=0x3e8) [0061.330] GetProcessHeap () returned 0x3150000 [0061.330] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c448 [0061.330] GetProcessHeap () returned 0x3150000 [0061.330] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c4c0 [0061.330] GetProcessHeap () returned 0x3150000 [0061.330] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c420 [0061.330] GetProcessHeap () returned 0x3150000 [0061.330] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318b270 [0061.330] GetProcessHeap () returned 0x3150000 [0061.330] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b270 | out: hHeap=0x3150000) returned 1 [0061.330] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c4c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0061.330] GetProcessHeap () returned 0x3150000 [0061.330] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c420 | out: hHeap=0x3150000) returned 1 [0061.330] GetProcessHeap () returned 0x3150000 [0061.330] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c448 | out: hHeap=0x3150000) returned 1 [0061.330] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0061.331] GetProcessHeap () returned 0x3150000 [0061.331] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c4c0 | out: hHeap=0x3150000) returned 1 [0061.331] GetProcessHeap () returned 0x3150000 [0061.331] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218bd8 [0061.331] GetProcessHeap () returned 0x3150000 [0061.331] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218d40 [0061.331] GetProcessHeap () returned 0x3150000 [0061.331] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218d40, Size=0x72) returned 0x316e4a8 [0061.331] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0061.331] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x348 [0061.331] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x0 [0061.331] GetProcessHeap () returned 0x3150000 [0061.331] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218bd8 | out: hHeap=0x3150000) returned 1 [0061.331] GetProcessHeap () returned 0x3150000 [0061.331] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316e4a8 | out: hHeap=0x3150000) returned 1 [0061.331] ReleaseMutex (hMutex=0x348) returned 1 [0061.331] CloseHandle (hObject=0x348) returned 1 [0061.331] Sleep (dwMilliseconds=0x3e8) [0062.662] GetProcessHeap () returned 0x3150000 [0062.663] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c128 [0062.663] GetProcessHeap () returned 0x3150000 [0062.663] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c150 [0062.663] GetProcessHeap () returned 0x3150000 [0062.663] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c060 [0062.663] GetProcessHeap () returned 0x3150000 [0062.663] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318aab8 [0062.663] GetProcessHeap () returned 0x3150000 [0062.663] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318aab8 | out: hHeap=0x3150000) returned 1 [0062.663] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c150, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0062.663] GetProcessHeap () returned 0x3150000 [0062.663] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c060 | out: hHeap=0x3150000) returned 1 [0062.663] GetProcessHeap () returned 0x3150000 [0062.663] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c128 | out: hHeap=0x3150000) returned 1 [0062.663] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0062.663] GetProcessHeap () returned 0x3150000 [0062.663] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c150 | out: hHeap=0x3150000) returned 1 [0062.663] GetProcessHeap () returned 0x3150000 [0062.663] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218758 [0062.663] GetProcessHeap () returned 0x3150000 [0062.663] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x32187a0 [0062.663] GetProcessHeap () returned 0x3150000 [0062.663] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x32187a0, Size=0x72) returned 0x316f028 [0062.663] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0062.664] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x348 [0062.664] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x0 [0062.664] GetProcessHeap () returned 0x3150000 [0062.664] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218758 | out: hHeap=0x3150000) returned 1 [0062.664] GetProcessHeap () returned 0x3150000 [0062.664] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f028 | out: hHeap=0x3150000) returned 1 [0062.664] ReleaseMutex (hMutex=0x348) returned 1 [0062.664] CloseHandle (hObject=0x348) returned 1 [0062.664] Sleep (dwMilliseconds=0x3e8) [0063.891] GetProcessHeap () returned 0x3150000 [0063.891] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c0b0 [0063.891] GetProcessHeap () returned 0x3150000 [0063.891] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c4c0 [0063.891] GetProcessHeap () returned 0x3150000 [0063.891] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c358 [0063.891] GetProcessHeap () returned 0x3150000 [0063.891] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318b3a0 [0063.891] GetProcessHeap () returned 0x3150000 [0063.891] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b3a0 | out: hHeap=0x3150000) returned 1 [0063.891] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c4c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0063.891] GetProcessHeap () returned 0x3150000 [0063.891] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c358 | out: hHeap=0x3150000) returned 1 [0063.891] GetProcessHeap () returned 0x3150000 [0063.891] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c0b0 | out: hHeap=0x3150000) returned 1 [0063.891] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0063.891] GetProcessHeap () returned 0x3150000 [0063.892] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c4c0 | out: hHeap=0x3150000) returned 1 [0063.892] GetProcessHeap () returned 0x3150000 [0063.892] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218d40 [0063.892] GetProcessHeap () returned 0x3150000 [0063.892] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218830 [0063.892] GetProcessHeap () returned 0x3150000 [0063.892] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218830, Size=0x72) returned 0x316e9a8 [0063.892] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0063.892] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x350 [0063.892] WaitForSingleObject (hHandle=0x350, dwMilliseconds=0x0) returned 0x0 [0063.892] GetProcessHeap () returned 0x3150000 [0063.892] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218d40 | out: hHeap=0x3150000) returned 1 [0063.892] GetProcessHeap () returned 0x3150000 [0063.892] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316e9a8 | out: hHeap=0x3150000) returned 1 [0063.892] ReleaseMutex (hMutex=0x350) returned 1 [0063.892] CloseHandle (hObject=0x350) returned 1 [0063.892] Sleep (dwMilliseconds=0x3e8) [0065.146] GetProcessHeap () returned 0x3150000 [0065.147] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c448 [0065.147] GetProcessHeap () returned 0x3150000 [0065.147] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c470 [0065.147] GetProcessHeap () returned 0x3150000 [0065.147] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c498 [0065.147] GetProcessHeap () returned 0x3150000 [0065.147] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318a8f0 [0065.147] GetProcessHeap () returned 0x3150000 [0065.147] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318a8f0 | out: hHeap=0x3150000) returned 1 [0065.147] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c470, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0065.147] GetProcessHeap () returned 0x3150000 [0065.147] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c498 | out: hHeap=0x3150000) returned 1 [0065.147] GetProcessHeap () returned 0x3150000 [0065.147] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c448 | out: hHeap=0x3150000) returned 1 [0065.147] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0065.457] GetProcessHeap () returned 0x3150000 [0065.457] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c470 | out: hHeap=0x3150000) returned 1 [0065.457] GetProcessHeap () returned 0x3150000 [0065.457] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218878 [0065.457] GetProcessHeap () returned 0x3150000 [0065.457] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218758 [0065.457] GetProcessHeap () returned 0x3150000 [0065.457] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218758, Size=0x72) returned 0x316e5a8 [0065.457] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0065.457] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x350 [0065.457] WaitForSingleObject (hHandle=0x350, dwMilliseconds=0x0) returned 0x0 [0065.457] GetProcessHeap () returned 0x3150000 [0065.457] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218878 | out: hHeap=0x3150000) returned 1 [0065.457] GetProcessHeap () returned 0x3150000 [0065.457] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316e5a8 | out: hHeap=0x3150000) returned 1 [0065.457] ReleaseMutex (hMutex=0x350) returned 1 [0065.458] CloseHandle (hObject=0x350) returned 1 [0065.458] Sleep (dwMilliseconds=0x3e8) [0066.569] GetProcessHeap () returned 0x3150000 [0066.569] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c240 [0066.569] GetProcessHeap () returned 0x3150000 [0066.569] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c218 [0066.569] GetProcessHeap () returned 0x3150000 [0066.569] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c380 [0066.569] GetProcessHeap () returned 0x3150000 [0066.569] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318ad18 [0066.569] GetProcessHeap () returned 0x3150000 [0066.569] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318ad18 | out: hHeap=0x3150000) returned 1 [0066.569] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c218, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0066.569] GetProcessHeap () returned 0x3150000 [0066.569] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c380 | out: hHeap=0x3150000) returned 1 [0066.569] GetProcessHeap () returned 0x3150000 [0066.569] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c240 | out: hHeap=0x3150000) returned 1 [0066.569] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0066.569] GetProcessHeap () returned 0x3150000 [0066.569] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c218 | out: hHeap=0x3150000) returned 1 [0066.569] GetProcessHeap () returned 0x3150000 [0066.569] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x32187a0 [0066.569] GetProcessHeap () returned 0x3150000 [0066.569] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218878 [0066.569] GetProcessHeap () returned 0x3150000 [0066.569] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218878, Size=0x72) returned 0x316ee28 [0066.569] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0066.570] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x350 [0066.570] WaitForSingleObject (hHandle=0x350, dwMilliseconds=0x0) returned 0x0 [0066.570] GetProcessHeap () returned 0x3150000 [0066.570] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x32187a0 | out: hHeap=0x3150000) returned 1 [0066.570] GetProcessHeap () returned 0x3150000 [0066.570] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316ee28 | out: hHeap=0x3150000) returned 1 [0066.570] ReleaseMutex (hMutex=0x350) returned 1 [0066.570] CloseHandle (hObject=0x350) returned 1 [0066.570] Sleep (dwMilliseconds=0x3e8) [0067.705] GetProcessHeap () returned 0x3150000 [0067.705] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c3f8 [0067.705] GetProcessHeap () returned 0x3150000 [0067.705] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c420 [0067.705] GetProcessHeap () returned 0x3150000 [0067.705] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c088 [0067.705] GetProcessHeap () returned 0x3150000 [0067.705] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318abe8 [0067.705] GetProcessHeap () returned 0x3150000 [0067.705] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318abe8 | out: hHeap=0x3150000) returned 1 [0067.705] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c420, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0067.705] GetProcessHeap () returned 0x3150000 [0067.705] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c088 | out: hHeap=0x3150000) returned 1 [0067.705] GetProcessHeap () returned 0x3150000 [0067.705] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c3f8 | out: hHeap=0x3150000) returned 1 [0067.705] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0067.707] GetProcessHeap () returned 0x3150000 [0067.707] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c420 | out: hHeap=0x3150000) returned 1 [0067.707] GetProcessHeap () returned 0x3150000 [0067.707] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218830 [0067.707] GetProcessHeap () returned 0x3150000 [0067.707] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x32187e8 [0067.707] GetProcessHeap () returned 0x3150000 [0067.707] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x32187e8, Size=0x72) returned 0x316eea8 [0067.707] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0067.707] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x354 [0067.707] WaitForSingleObject (hHandle=0x354, dwMilliseconds=0x0) returned 0x0 [0067.707] GetProcessHeap () returned 0x3150000 [0067.707] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218830 | out: hHeap=0x3150000) returned 1 [0067.707] GetProcessHeap () returned 0x3150000 [0067.707] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316eea8 | out: hHeap=0x3150000) returned 1 [0067.707] ReleaseMutex (hMutex=0x354) returned 1 [0067.707] CloseHandle (hObject=0x354) returned 1 [0067.707] Sleep (dwMilliseconds=0x3e8) [0068.905] GetProcessHeap () returned 0x3150000 [0068.905] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c038 [0068.905] GetProcessHeap () returned 0x3150000 [0068.905] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c4e8 [0068.905] GetProcessHeap () returned 0x3150000 [0068.905] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c358 [0068.905] GetProcessHeap () returned 0x3150000 [0068.905] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318b140 [0068.905] GetProcessHeap () returned 0x3150000 [0068.905] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b140 | out: hHeap=0x3150000) returned 1 [0068.905] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c4e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0068.905] GetProcessHeap () returned 0x3150000 [0068.905] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c358 | out: hHeap=0x3150000) returned 1 [0068.905] GetProcessHeap () returned 0x3150000 [0068.905] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c038 | out: hHeap=0x3150000) returned 1 [0068.905] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0068.905] GetProcessHeap () returned 0x3150000 [0068.905] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c4e8 | out: hHeap=0x3150000) returned 1 [0068.905] GetProcessHeap () returned 0x3150000 [0068.906] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x32187a0 [0068.906] GetProcessHeap () returned 0x3150000 [0068.906] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218950 [0068.906] GetProcessHeap () returned 0x3150000 [0068.906] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218950, Size=0x72) returned 0x316eea8 [0068.906] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0068.906] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x2bc [0068.906] WaitForSingleObject (hHandle=0x2bc, dwMilliseconds=0x0) returned 0x0 [0068.906] GetProcessHeap () returned 0x3150000 [0068.906] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x32187a0 | out: hHeap=0x3150000) returned 1 [0068.906] GetProcessHeap () returned 0x3150000 [0068.906] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316eea8 | out: hHeap=0x3150000) returned 1 [0068.906] ReleaseMutex (hMutex=0x2bc) returned 1 [0068.906] CloseHandle (hObject=0x2bc) returned 1 [0068.906] Sleep (dwMilliseconds=0x3e8) [0070.117] GetProcessHeap () returned 0x3150000 [0070.117] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c038 [0070.117] GetProcessHeap () returned 0x3150000 [0070.117] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c4c0 [0070.117] GetProcessHeap () returned 0x3150000 [0070.117] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c1c8 [0070.117] GetProcessHeap () returned 0x3150000 [0070.117] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318adb0 [0070.117] GetProcessHeap () returned 0x3150000 [0070.117] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318adb0 | out: hHeap=0x3150000) returned 1 [0070.117] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c4c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0070.117] GetProcessHeap () returned 0x3150000 [0070.117] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c1c8 | out: hHeap=0x3150000) returned 1 [0070.117] GetProcessHeap () returned 0x3150000 [0070.117] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c038 | out: hHeap=0x3150000) returned 1 [0070.117] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0070.118] GetProcessHeap () returned 0x3150000 [0070.118] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c4c0 | out: hHeap=0x3150000) returned 1 [0070.118] GetProcessHeap () returned 0x3150000 [0070.118] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218cb0 [0070.118] GetProcessHeap () returned 0x3150000 [0070.118] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218878 [0070.118] GetProcessHeap () returned 0x3150000 [0070.118] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218878, Size=0x72) returned 0x316e428 [0070.118] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0070.118] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x31c [0070.118] WaitForSingleObject (hHandle=0x31c, dwMilliseconds=0x0) returned 0x0 [0070.118] GetProcessHeap () returned 0x3150000 [0070.118] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218cb0 | out: hHeap=0x3150000) returned 1 [0070.118] GetProcessHeap () returned 0x3150000 [0070.118] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316e428 | out: hHeap=0x3150000) returned 1 [0070.118] ReleaseMutex (hMutex=0x31c) returned 1 [0070.118] CloseHandle (hObject=0x31c) returned 1 [0070.118] Sleep (dwMilliseconds=0x3e8) [0071.364] GetProcessHeap () returned 0x3150000 [0071.364] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c448 [0071.364] GetProcessHeap () returned 0x3150000 [0071.364] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c330 [0071.364] GetProcessHeap () returned 0x3150000 [0071.364] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c358 [0071.364] GetProcessHeap () returned 0x3150000 [0071.364] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318ab50 [0071.364] GetProcessHeap () returned 0x3150000 [0071.364] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318ab50 | out: hHeap=0x3150000) returned 1 [0071.364] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c330, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0071.364] GetProcessHeap () returned 0x3150000 [0071.364] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c358 | out: hHeap=0x3150000) returned 1 [0071.364] GetProcessHeap () returned 0x3150000 [0071.364] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c448 | out: hHeap=0x3150000) returned 1 [0071.364] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0071.365] GetProcessHeap () returned 0x3150000 [0071.365] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c330 | out: hHeap=0x3150000) returned 1 [0071.365] GetProcessHeap () returned 0x3150000 [0071.365] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218758 [0071.365] GetProcessHeap () returned 0x3150000 [0071.365] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218b48 [0071.365] GetProcessHeap () returned 0x3150000 [0071.365] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218b48, Size=0x72) returned 0x316f1a8 [0071.365] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0071.365] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x31c [0071.365] WaitForSingleObject (hHandle=0x31c, dwMilliseconds=0x0) returned 0x0 [0071.365] GetProcessHeap () returned 0x3150000 [0071.365] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218758 | out: hHeap=0x3150000) returned 1 [0071.365] GetProcessHeap () returned 0x3150000 [0071.365] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f1a8 | out: hHeap=0x3150000) returned 1 [0071.365] ReleaseMutex (hMutex=0x31c) returned 1 [0071.365] CloseHandle (hObject=0x31c) returned 1 [0071.365] Sleep (dwMilliseconds=0x3e8) [0072.552] GetProcessHeap () returned 0x3150000 [0072.552] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c038 [0072.553] GetProcessHeap () returned 0x3150000 [0072.553] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c1c8 [0072.553] GetProcessHeap () returned 0x3150000 [0072.553] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c420 [0072.553] GetProcessHeap () returned 0x3150000 [0072.553] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318af78 [0072.553] GetProcessHeap () returned 0x3150000 [0072.553] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318af78 | out: hHeap=0x3150000) returned 1 [0072.553] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c1c8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0072.553] GetProcessHeap () returned 0x3150000 [0072.553] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c420 | out: hHeap=0x3150000) returned 1 [0072.553] GetProcessHeap () returned 0x3150000 [0072.553] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c038 | out: hHeap=0x3150000) returned 1 [0072.553] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0072.553] GetProcessHeap () returned 0x3150000 [0072.553] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c1c8 | out: hHeap=0x3150000) returned 1 [0072.553] GetProcessHeap () returned 0x3150000 [0072.553] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x32189e0 [0072.553] GetProcessHeap () returned 0x3150000 [0072.553] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218cb0 [0072.553] GetProcessHeap () returned 0x3150000 [0072.553] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218cb0, Size=0x72) returned 0x316e428 [0072.553] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0072.554] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x300 [0072.554] WaitForSingleObject (hHandle=0x300, dwMilliseconds=0x0) returned 0x0 [0072.554] GetProcessHeap () returned 0x3150000 [0072.554] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x32189e0 | out: hHeap=0x3150000) returned 1 [0072.554] GetProcessHeap () returned 0x3150000 [0072.554] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316e428 | out: hHeap=0x3150000) returned 1 [0072.554] ReleaseMutex (hMutex=0x300) returned 1 [0072.554] CloseHandle (hObject=0x300) returned 1 [0072.554] Sleep (dwMilliseconds=0x3e8) [0073.879] GetProcessHeap () returned 0x3150000 [0073.879] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c358 [0073.879] GetProcessHeap () returned 0x3150000 [0073.879] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c038 [0073.879] GetProcessHeap () returned 0x3150000 [0073.879] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c1c8 [0073.879] GetProcessHeap () returned 0x3150000 [0073.879] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318b1d8 [0073.879] GetProcessHeap () returned 0x3150000 [0073.879] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b1d8 | out: hHeap=0x3150000) returned 1 [0073.879] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c038, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0073.879] GetProcessHeap () returned 0x3150000 [0073.879] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c1c8 | out: hHeap=0x3150000) returned 1 [0073.879] GetProcessHeap () returned 0x3150000 [0073.879] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c358 | out: hHeap=0x3150000) returned 1 [0073.879] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0073.892] GetProcessHeap () returned 0x3150000 [0073.896] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c038 | out: hHeap=0x3150000) returned 1 [0073.898] GetProcessHeap () returned 0x3150000 [0073.898] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218cb0 [0073.898] GetProcessHeap () returned 0x3150000 [0073.898] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218998 [0073.898] GetProcessHeap () returned 0x3150000 [0073.898] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218998, Size=0x72) returned 0x316e6a8 [0073.898] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0073.898] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x318 [0073.898] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x0) returned 0x0 [0073.898] GetProcessHeap () returned 0x3150000 [0073.898] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218cb0 | out: hHeap=0x3150000) returned 1 [0073.898] GetProcessHeap () returned 0x3150000 [0073.898] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316e6a8 | out: hHeap=0x3150000) returned 1 [0073.898] ReleaseMutex (hMutex=0x318) returned 1 [0073.898] CloseHandle (hObject=0x318) returned 1 [0073.898] Sleep (dwMilliseconds=0x3e8) [0075.193] GetProcessHeap () returned 0x3150000 [0075.193] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c038 [0075.193] GetProcessHeap () returned 0x3150000 [0075.193] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c4c0 [0075.193] GetProcessHeap () returned 0x3150000 [0075.193] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c010 [0075.193] GetProcessHeap () returned 0x3150000 [0075.193] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318a728 [0075.193] GetProcessHeap () returned 0x3150000 [0075.193] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318a728 | out: hHeap=0x3150000) returned 1 [0075.193] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c4c0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0075.193] GetProcessHeap () returned 0x3150000 [0075.193] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c010 | out: hHeap=0x3150000) returned 1 [0075.193] GetProcessHeap () returned 0x3150000 [0075.193] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c038 | out: hHeap=0x3150000) returned 1 [0075.193] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0075.194] GetProcessHeap () returned 0x3150000 [0075.194] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c4c0 | out: hHeap=0x3150000) returned 1 [0075.194] GetProcessHeap () returned 0x3150000 [0075.194] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218830 [0075.194] GetProcessHeap () returned 0x3150000 [0075.194] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x32187a0 [0075.194] GetProcessHeap () returned 0x3150000 [0075.194] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x32187a0, Size=0x72) returned 0x316f0a8 [0075.194] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0075.194] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x318 [0075.194] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x0) returned 0x0 [0075.194] GetProcessHeap () returned 0x3150000 [0075.194] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218830 | out: hHeap=0x3150000) returned 1 [0075.194] GetProcessHeap () returned 0x3150000 [0075.194] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f0a8 | out: hHeap=0x3150000) returned 1 [0075.194] ReleaseMutex (hMutex=0x318) returned 1 [0075.194] CloseHandle (hObject=0x318) returned 1 [0075.194] Sleep (dwMilliseconds=0x3e8) [0076.369] GetProcessHeap () returned 0x3150000 [0076.370] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c2e0 [0076.370] GetProcessHeap () returned 0x3150000 [0076.370] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c4e8 [0076.370] GetProcessHeap () returned 0x3150000 [0076.370] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c240 [0076.370] GetProcessHeap () returned 0x3150000 [0076.370] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318b270 [0076.370] GetProcessHeap () returned 0x3150000 [0076.370] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b270 | out: hHeap=0x3150000) returned 1 [0076.370] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c4e8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0076.370] GetProcessHeap () returned 0x3150000 [0076.370] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c240 | out: hHeap=0x3150000) returned 1 [0076.370] GetProcessHeap () returned 0x3150000 [0076.370] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c2e0 | out: hHeap=0x3150000) returned 1 [0076.370] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0076.370] GetProcessHeap () returned 0x3150000 [0076.370] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c4e8 | out: hHeap=0x3150000) returned 1 [0076.370] GetProcessHeap () returned 0x3150000 [0076.370] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218b48 [0076.370] GetProcessHeap () returned 0x3150000 [0076.370] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218cb0 [0076.370] GetProcessHeap () returned 0x3150000 [0076.370] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218cb0, Size=0x72) returned 0x316f1a8 [0076.370] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0076.371] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x318 [0076.371] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x0) returned 0x0 [0076.371] GetProcessHeap () returned 0x3150000 [0076.371] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218b48 | out: hHeap=0x3150000) returned 1 [0076.371] GetProcessHeap () returned 0x3150000 [0076.371] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316f1a8 | out: hHeap=0x3150000) returned 1 [0076.371] ReleaseMutex (hMutex=0x318) returned 1 [0076.371] CloseHandle (hObject=0x318) returned 1 [0076.371] Sleep (dwMilliseconds=0x3e8) [0077.385] GetProcessHeap () returned 0x3150000 [0077.385] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c218 [0077.385] GetProcessHeap () returned 0x3150000 [0077.385] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c2b8 [0077.385] GetProcessHeap () returned 0x3150000 [0077.385] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c100 [0077.385] GetProcessHeap () returned 0x3150000 [0077.385] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318abe8 [0077.385] GetProcessHeap () returned 0x3150000 [0077.385] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318abe8 | out: hHeap=0x3150000) returned 1 [0077.385] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c2b8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0077.385] GetProcessHeap () returned 0x3150000 [0077.385] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c100 | out: hHeap=0x3150000) returned 1 [0077.385] GetProcessHeap () returned 0x3150000 [0077.385] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c218 | out: hHeap=0x3150000) returned 1 [0077.385] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0077.386] GetProcessHeap () returned 0x3150000 [0077.386] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c2b8 | out: hHeap=0x3150000) returned 1 [0077.386] GetProcessHeap () returned 0x3150000 [0077.386] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218758 [0077.386] GetProcessHeap () returned 0x3150000 [0077.386] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218b48 [0077.386] GetProcessHeap () returned 0x3150000 [0077.386] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218b48, Size=0x72) returned 0x316eaa8 [0077.386] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0077.386] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x368 [0077.386] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x0 [0077.386] GetProcessHeap () returned 0x3150000 [0077.386] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218758 | out: hHeap=0x3150000) returned 1 [0077.386] GetProcessHeap () returned 0x3150000 [0077.386] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316eaa8 | out: hHeap=0x3150000) returned 1 [0077.386] ReleaseMutex (hMutex=0x368) returned 1 [0077.386] CloseHandle (hObject=0x368) returned 1 [0077.386] Sleep (dwMilliseconds=0x3e8) [0078.631] GetProcessHeap () returned 0x3150000 [0078.631] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c3a8 [0078.631] GetProcessHeap () returned 0x3150000 [0078.631] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c308 [0078.631] GetProcessHeap () returned 0x3150000 [0078.631] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c3d0 [0078.631] GetProcessHeap () returned 0x3150000 [0078.631] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318ae48 [0078.631] GetProcessHeap () returned 0x3150000 [0078.631] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318ae48 | out: hHeap=0x3150000) returned 1 [0078.632] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c308, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0078.632] GetProcessHeap () returned 0x3150000 [0078.632] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c3d0 | out: hHeap=0x3150000) returned 1 [0078.632] GetProcessHeap () returned 0x3150000 [0078.632] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c3a8 | out: hHeap=0x3150000) returned 1 [0078.632] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0078.632] GetProcessHeap () returned 0x3150000 [0078.632] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c308 | out: hHeap=0x3150000) returned 1 [0078.632] GetProcessHeap () returned 0x3150000 [0078.632] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218cb0 [0078.632] GetProcessHeap () returned 0x3150000 [0078.632] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x32188c0 [0078.632] GetProcessHeap () returned 0x3150000 [0078.632] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x32188c0, Size=0x72) returned 0x31fe250 [0078.632] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0078.632] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x340 [0078.633] WaitForSingleObject (hHandle=0x340, dwMilliseconds=0x0) returned 0x0 [0078.633] GetProcessHeap () returned 0x3150000 [0078.633] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218cb0 | out: hHeap=0x3150000) returned 1 [0078.633] GetProcessHeap () returned 0x3150000 [0078.633] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe250 | out: hHeap=0x3150000) returned 1 [0078.633] ReleaseMutex (hMutex=0x340) returned 1 [0078.633] CloseHandle (hObject=0x340) returned 1 [0078.633] Sleep (dwMilliseconds=0x3e8) [0079.915] GetProcessHeap () returned 0x3150000 [0079.925] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c0b0 [0079.925] GetProcessHeap () returned 0x3150000 [0079.925] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c010 [0079.925] GetProcessHeap () returned 0x3150000 [0079.925] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c290 [0079.926] GetProcessHeap () returned 0x3150000 [0079.926] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318b270 [0079.926] GetProcessHeap () returned 0x3150000 [0079.926] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b270 | out: hHeap=0x3150000) returned 1 [0079.926] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c010, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0079.926] GetProcessHeap () returned 0x3150000 [0079.926] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c290 | out: hHeap=0x3150000) returned 1 [0079.926] GetProcessHeap () returned 0x3150000 [0079.926] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c0b0 | out: hHeap=0x3150000) returned 1 [0079.926] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0079.926] GetProcessHeap () returned 0x3150000 [0079.926] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c010 | out: hHeap=0x3150000) returned 1 [0079.926] GetProcessHeap () returned 0x3150000 [0079.926] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218cb0 [0079.926] GetProcessHeap () returned 0x3150000 [0079.926] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218998 [0079.926] GetProcessHeap () returned 0x3150000 [0079.926] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218998, Size=0x72) returned 0x31fe650 [0079.926] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0079.926] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x370 [0079.926] WaitForSingleObject (hHandle=0x370, dwMilliseconds=0x0) returned 0x0 [0079.926] GetProcessHeap () returned 0x3150000 [0079.926] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218cb0 | out: hHeap=0x3150000) returned 1 [0079.926] GetProcessHeap () returned 0x3150000 [0079.926] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe650 | out: hHeap=0x3150000) returned 1 [0079.926] ReleaseMutex (hMutex=0x370) returned 1 [0079.926] CloseHandle (hObject=0x370) returned 1 [0079.927] Sleep (dwMilliseconds=0x3e8) [0080.992] GetProcessHeap () returned 0x3150000 [0080.996] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x324c420 [0080.996] GetProcessHeap () returned 0x3150000 [0080.996] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x324c0b0 [0080.996] GetProcessHeap () returned 0x3150000 [0080.996] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x324c4c0 [0080.996] GetProcessHeap () returned 0x3150000 [0080.996] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318b270 [0080.996] GetProcessHeap () returned 0x3150000 [0080.996] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b270 | out: hHeap=0x3150000) returned 1 [0080.996] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x324c0b0, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0080.997] GetProcessHeap () returned 0x3150000 [0081.000] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c4c0 | out: hHeap=0x3150000) returned 1 [0081.000] GetProcessHeap () returned 0x3150000 [0081.000] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c420 | out: hHeap=0x3150000) returned 1 [0081.000] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x310fdac, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x310fdac*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0081.000] GetProcessHeap () returned 0x3150000 [0081.000] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x324c0b0 | out: hHeap=0x3150000) returned 1 [0081.001] GetProcessHeap () returned 0x3150000 [0081.001] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x3218cb0 [0081.001] GetProcessHeap () returned 0x3150000 [0081.001] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x3a) returned 0x3218710 [0081.001] GetProcessHeap () returned 0x3150000 [0081.001] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x3218710, Size=0x72) returned 0x31fddd0 [0081.001] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\<>B419773000000000") returned 0x0 [0081.001] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\<>B419773000000000") returned 0x36c [0081.001] WaitForSingleObject (hHandle=0x36c, dwMilliseconds=0x0) returned 0x0 [0081.001] GetProcessHeap () returned 0x3150000 [0081.001] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3218cb0 | out: hHeap=0x3150000) returned 1 [0081.001] GetProcessHeap () returned 0x3150000 [0081.001] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fddd0 | out: hHeap=0x3150000) returned 1 [0081.001] ReleaseMutex (hMutex=0x36c) returned 1 [0081.001] CloseHandle (hObject=0x36c) returned 1 [0081.001] Sleep (dwMilliseconds=0x3e8) Thread: id = 13 os_tid = 0xef8 [0053.886] GetProcessHeap () returned 0x3150000 [0053.886] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x440) returned 0x31745d8 [0053.886] GetProcessHeap () returned 0x3150000 [0053.886] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x434) returned 0x3174a20 [0053.886] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x244 [0053.988] Process32FirstW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0053.989] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0053.989] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0053.990] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0053.990] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0053.991] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0053.991] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0053.992] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0053.992] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0053.992] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.993] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0053.993] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0053.994] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.994] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0053.995] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x52, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.995] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.996] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.996] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.997] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.998] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.998] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.999] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0053.999] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.000] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0054.000] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.001] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.001] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0054.001] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0054.002] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.002] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.003] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0054.003] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0054.004] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0054.004] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0054.005] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0054.005] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0054.006] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0054.006] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.007] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.007] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0054.008] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0054.008] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0054.009] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.009] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0054.009] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0054.010] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0054.010] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0054.011] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0054.011] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0054.012] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0054.012] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0054.013] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0054.013] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0054.014] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0054.292] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0054.292] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0054.293] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0054.293] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0054.295] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0054.295] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0054.296] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0054.296] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0054.297] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0054.298] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0054.298] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0054.299] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0054.299] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0054.300] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0054.300] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.301] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.301] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.302] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0054.302] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0054.303] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0054.304] Process32NextW (in: hSnapshot=0x244, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0 [0054.304] CloseHandle (hObject=0x244) returned 1 [0054.304] Sleep (dwMilliseconds=0x1f4) [0054.930] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x27c [0054.939] Process32FirstW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0054.940] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0054.940] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0054.941] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0054.941] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0054.942] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0054.942] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0054.942] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0054.943] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0054.943] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.944] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0054.944] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0054.945] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.945] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0054.946] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x53, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.946] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.947] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.947] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.948] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.948] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.948] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.949] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.949] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.951] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0054.951] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.951] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.952] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0054.952] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0054.953] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0054.953] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.954] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0054.954] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0054.955] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0054.955] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0054.956] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0054.956] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0054.957] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0054.957] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0054.957] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.958] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0054.958] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0054.959] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0054.959] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0054.960] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0054.960] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0054.961] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0054.961] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0054.962] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0054.962] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0054.963] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0054.963] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0054.963] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0054.964] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0054.964] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0054.965] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0055.182] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0055.182] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0055.183] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0055.183] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0055.184] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0055.184] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0055.185] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0055.186] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0055.186] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0055.187] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0055.187] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0055.188] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0055.189] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0055.189] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.190] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.190] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.191] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0055.191] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.192] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0055.193] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.193] Process32NextW (in: hSnapshot=0x27c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0055.194] CloseHandle (hObject=0x27c) returned 1 [0055.194] Sleep (dwMilliseconds=0x1f4) [0055.812] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x320 [0055.819] Process32FirstW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0055.819] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0055.820] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0055.820] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.821] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0055.821] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0055.822] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0055.822] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0055.822] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0055.823] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.823] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.824] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0055.824] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.825] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0055.826] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.826] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.826] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.827] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.827] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.828] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.828] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.829] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.829] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.830] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0055.830] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.831] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.831] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0055.831] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0055.832] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.832] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.833] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0055.833] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0055.834] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0055.834] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0055.835] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0055.835] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0055.836] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0055.836] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0055.836] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.837] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0055.837] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0055.838] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0055.838] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0055.839] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0055.839] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0055.840] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0055.840] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0055.841] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0055.841] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0055.842] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0055.842] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0055.843] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0055.843] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0055.844] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0055.844] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0055.845] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0055.845] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0055.846] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0055.846] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0055.847] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0055.847] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0055.848] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0055.848] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0055.849] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0055.850] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0055.850] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0055.851] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0055.852] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0055.852] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.853] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.853] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0055.854] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0055.854] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0055.855] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0055.855] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.291] Process32NextW (in: hSnapshot=0x320, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0056.292] CloseHandle (hObject=0x320) returned 1 [0056.292] Sleep (dwMilliseconds=0x1f4) [0056.971] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x34c [0056.978] Process32FirstW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0056.979] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0056.979] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0056.980] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0056.980] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0056.980] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0056.982] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0056.983] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0056.983] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0056.983] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.984] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0056.984] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0056.985] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.985] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0056.986] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.986] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.987] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.987] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.988] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.988] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.989] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.989] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.990] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.990] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0056.990] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.991] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.991] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0056.992] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0056.992] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0056.993] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0056.993] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0056.994] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0056.994] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0056.995] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0056.995] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0056.996] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0056.996] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0056.997] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0056.997] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0056.998] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0056.998] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0056.999] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0056.999] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0057.000] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0057.000] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0057.001] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0057.001] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0057.001] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0057.002] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0057.002] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0057.003] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0057.003] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0057.004] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0057.004] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0057.005] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0057.005] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0057.006] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0057.006] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0057.007] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0057.007] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0057.008] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0057.008] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0057.009] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0057.010] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0057.010] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0057.011] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0057.011] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0057.012] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0057.304] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0057.305] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.306] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0057.306] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0057.307] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0057.307] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.308] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0057.308] CloseHandle (hObject=0x34c) returned 1 [0057.311] Sleep (dwMilliseconds=0x1f4) [0057.934] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x350 [0057.945] Process32FirstW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0057.945] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0057.946] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0057.946] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0057.946] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0057.947] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0057.948] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0057.948] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0057.949] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0057.949] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.949] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0057.950] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0057.950] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.951] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0057.951] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.952] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.952] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.953] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.953] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.954] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.954] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.955] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.956] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.956] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0057.957] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.957] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.958] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0057.958] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0057.958] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0057.959] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0057.959] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0057.960] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0057.960] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0057.961] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0057.961] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0057.962] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0057.962] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0057.963] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0057.963] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0057.964] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0057.964] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0057.965] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0057.965] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0057.966] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0057.966] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0057.967] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0057.967] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0057.967] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0057.968] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0057.968] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0058.170] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0058.171] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0058.171] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0058.172] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0058.172] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0058.173] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0058.174] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0058.175] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0058.176] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0058.178] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0058.178] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0058.179] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0058.180] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0058.181] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0058.181] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0058.182] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0058.183] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0058.184] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0058.185] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0058.186] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.186] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0058.187] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0058.188] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0058.189] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.191] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0058.191] CloseHandle (hObject=0x350) returned 1 [0058.191] Sleep (dwMilliseconds=0x1f4) [0058.891] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364 [0058.898] Process32FirstW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0058.898] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0058.899] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0058.900] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0058.900] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0058.901] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0058.901] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0058.902] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0058.902] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0058.903] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.903] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0058.904] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0058.904] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.905] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0058.905] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.906] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.906] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.907] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.907] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.908] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.908] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.909] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.909] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.910] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0058.910] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.911] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.911] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0058.912] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0058.912] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0058.913] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0058.913] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0058.914] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0058.914] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0058.915] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0058.915] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0058.916] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0058.916] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0058.917] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0058.917] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0058.918] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0058.918] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0058.919] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0058.919] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0058.920] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0058.920] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0058.921] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0058.921] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0058.922] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0058.922] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0058.923] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0058.923] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0058.924] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0058.924] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0058.925] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0058.925] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0058.926] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0058.926] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0058.927] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0058.927] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0058.928] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0058.929] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0058.929] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0058.930] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0059.120] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0059.121] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0059.121] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0059.122] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0059.122] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.123] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.123] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.124] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0059.125] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.125] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0059.126] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.126] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0059.127] CloseHandle (hObject=0x364) returned 1 [0059.127] Sleep (dwMilliseconds=0x1f4) [0059.868] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364 [0059.873] Process32FirstW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0059.873] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0059.874] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0059.874] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0059.875] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0059.875] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0059.876] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0059.876] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0059.877] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0059.877] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.878] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0059.878] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0059.879] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.879] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0059.880] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.880] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.881] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.881] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.882] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.882] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.883] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.884] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.884] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.885] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0059.885] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.886] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.886] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0059.887] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0059.887] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.888] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0059.888] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0059.889] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0059.889] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0059.890] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0059.890] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0059.891] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0059.891] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0059.892] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0059.892] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0059.893] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0059.893] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1 [0059.894] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0059.894] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0059.895] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0059.895] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0059.896] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0059.896] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0059.897] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0059.897] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0059.898] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0059.898] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0059.899] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0059.899] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0059.900] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0059.900] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0059.901] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0059.901] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0059.902] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0059.902] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0059.903] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0059.903] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0059.904] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0059.904] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0059.905] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0059.906] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0059.906] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0059.907] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0059.907] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.908] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.908] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.909] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0059.909] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0059.910] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0059.911] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0059.911] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0059.912] CloseHandle (hObject=0x364) returned 1 [0059.912] Sleep (dwMilliseconds=0x1f4) [0061.056] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x348 [0061.063] Process32FirstW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0061.064] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0061.064] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0061.065] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0061.065] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0061.066] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0061.066] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0061.067] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0061.067] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0061.068] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.068] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0061.069] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0061.069] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.070] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0061.070] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.071] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.072] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.072] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.073] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.073] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.074] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.074] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.074] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.075] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0061.075] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.076] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.076] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0061.077] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0061.077] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.078] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0061.078] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0061.079] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0061.079] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0061.080] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0061.080] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0061.081] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0061.081] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0061.081] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0061.082] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0061.082] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0061.083] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0061.083] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0061.084] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0061.084] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0061.085] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0061.085] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0061.086] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0061.086] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0061.087] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0061.087] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0061.088] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0061.088] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0061.089] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0061.089] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0061.090] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0061.090] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0061.091] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0061.091] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0061.092] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0061.092] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0061.093] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0061.093] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0061.094] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0061.095] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0061.095] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0061.096] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0061.096] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0061.097] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0061.097] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.098] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0061.098] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0061.099] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0061.099] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.100] Process32NextW (in: hSnapshot=0x348, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0061.100] CloseHandle (hObject=0x348) returned 1 [0061.100] Sleep (dwMilliseconds=0x1f4) [0061.775] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x34c [0061.780] Process32FirstW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0061.780] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0061.781] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0061.781] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0061.782] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0061.782] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0061.783] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0061.783] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0061.784] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0061.784] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.785] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0061.785] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0061.786] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.786] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0061.787] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.787] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.787] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.788] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.788] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.789] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.789] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.790] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.791] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.791] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0061.792] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.792] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.793] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0061.793] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0061.794] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0061.794] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0061.794] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0061.795] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0061.795] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0061.796] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0061.796] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0061.797] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0061.797] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0061.798] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0061.798] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0061.799] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0061.799] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0061.800] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0061.800] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0061.801] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0061.801] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0061.801] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0061.802] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0061.802] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0061.803] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0061.803] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0061.804] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0061.804] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0061.805] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0061.805] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0061.806] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0061.806] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0061.807] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0061.807] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0061.808] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0061.808] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0061.809] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0061.810] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0061.810] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0061.811] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0061.811] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0061.812] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0061.812] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0061.813] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0061.814] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.267] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0062.268] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0062.268] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0062.269] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.269] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0062.270] CloseHandle (hObject=0x34c) returned 1 [0062.270] Sleep (dwMilliseconds=0x1f4) [0062.961] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x364 [0062.966] Process32FirstW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0062.967] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0062.967] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0062.967] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0062.968] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0062.968] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0062.969] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0062.969] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0062.970] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0062.970] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.971] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0062.971] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0062.972] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.972] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0062.973] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.973] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.973] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.974] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.975] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.975] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.975] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.976] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.976] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.977] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0062.977] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.978] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.978] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0062.979] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0062.979] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0062.980] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0062.980] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0062.980] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0062.981] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0062.981] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0062.982] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0062.982] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0062.983] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0062.983] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0062.984] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0062.984] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0062.985] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0062.985] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0062.986] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0062.986] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0062.987] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0062.987] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0062.987] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0062.988] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0062.988] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0062.989] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0062.989] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0062.999] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0062.999] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0063.000] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0063.000] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0063.001] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0063.001] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0063.002] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0063.002] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0063.003] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0063.003] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0063.004] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0063.004] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0063.214] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0063.215] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0063.215] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0063.216] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0063.216] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0063.217] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.217] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0063.218] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0063.218] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0063.219] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0063.219] Process32NextW (in: hSnapshot=0x364, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0063.220] CloseHandle (hObject=0x364) returned 1 [0063.220] Sleep (dwMilliseconds=0x1f4) [0064.022] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x350 [0064.029] Process32FirstW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0064.030] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0064.030] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0064.030] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0064.031] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0064.031] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0064.032] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0064.032] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0064.033] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0064.033] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.034] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0064.034] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0064.035] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.035] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0064.036] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.036] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.037] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.038] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.038] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.038] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.039] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.039] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.040] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.040] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0064.041] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.041] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.042] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0064.042] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0064.043] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.043] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0064.044] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0064.044] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0064.045] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0064.045] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0064.046] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0064.046] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0064.047] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0064.047] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0064.047] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0064.048] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0064.048] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0064.049] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0064.049] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0064.050] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0064.050] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0064.051] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0064.051] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0064.052] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0064.053] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0064.053] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0064.053] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0064.054] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0064.054] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0064.118] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0064.119] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0064.119] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0064.120] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0064.120] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0064.121] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0064.121] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0064.122] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0064.123] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0064.123] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0064.124] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0064.124] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0064.125] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0064.126] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0064.126] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0064.127] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.127] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0064.128] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0064.128] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0064.129] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.129] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0064.130] CloseHandle (hObject=0x350) returned 1 [0064.130] Sleep (dwMilliseconds=0x1f4) [0064.944] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x34c [0064.949] Process32FirstW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0064.950] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0064.950] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0064.951] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0064.951] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0064.952] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0064.952] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0064.952] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0064.953] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0064.954] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.954] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0064.955] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0064.955] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.956] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0064.956] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.957] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.957] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.958] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.958] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.959] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.960] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.960] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.960] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.961] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0064.961] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.962] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.962] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0064.963] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0064.963] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0064.964] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0064.964] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0064.965] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0064.965] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0064.966] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0064.966] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0064.967] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0064.967] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0064.968] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0064.968] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0064.969] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0064.969] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0064.970] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0064.970] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0064.970] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0064.971] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0064.972] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0064.972] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0064.972] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0064.973] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0064.973] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0064.974] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0064.975] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0064.975] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0064.976] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0064.976] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0064.977] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0064.977] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0064.977] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0064.978] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0064.979] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0064.979] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0064.980] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0065.193] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0065.194] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0065.194] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0065.195] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0065.196] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0065.196] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0065.197] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.197] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0065.198] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0065.198] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0065.199] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.199] Process32NextW (in: hSnapshot=0x34c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0065.200] CloseHandle (hObject=0x34c) returned 1 [0065.200] Sleep (dwMilliseconds=0x1f4) [0065.821] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x314 [0065.830] Process32FirstW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0065.831] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0065.831] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0065.832] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0065.832] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0065.832] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0065.833] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0065.834] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0065.834] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0065.835] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.835] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0065.836] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0065.836] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.837] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0065.837] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.838] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.838] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.839] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.839] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.840] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.840] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.841] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.841] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.841] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0065.842] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.842] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.843] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0065.844] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0065.844] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0065.844] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0065.845] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0065.845] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0065.846] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0065.846] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0065.847] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0065.847] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0065.848] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0065.848] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0065.849] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0065.850] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0065.850] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0065.850] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0065.851] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0065.851] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0065.852] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0065.852] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0065.853] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0065.853] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0065.854] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0065.854] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0065.855] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0065.855] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0065.856] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0066.161] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0066.162] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0066.163] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0066.163] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0066.163] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0066.164] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0066.165] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0066.165] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0066.166] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0066.166] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0066.167] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0066.168] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0066.168] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0066.169] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0066.169] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0066.170] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.170] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0066.171] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0066.171] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0066.172] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.173] Process32NextW (in: hSnapshot=0x314, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0066.173] CloseHandle (hObject=0x314) returned 1 [0066.173] Sleep (dwMilliseconds=0x1f4) [0066.839] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x350 [0066.844] Process32FirstW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0066.844] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0066.845] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0066.845] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0066.846] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0066.846] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0066.847] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0066.847] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0066.848] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0066.848] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.849] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0066.850] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0066.850] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.851] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0066.851] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.852] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.852] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.852] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.853] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.853] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.854] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.854] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.855] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.855] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0066.856] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.856] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.857] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0066.857] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0066.858] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0066.858] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0066.859] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0066.859] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0066.860] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0066.860] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0066.860] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0066.861] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0066.861] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0066.862] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0066.862] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0066.863] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0066.863] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0066.864] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0066.864] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0066.865] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0066.865] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0066.866] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0066.866] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0066.867] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0066.867] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0066.868] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0066.868] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0066.869] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0066.869] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0066.870] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0066.870] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0066.870] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0066.871] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0067.023] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0067.024] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0067.025] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0067.026] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0067.026] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0067.027] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0067.027] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0067.028] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0067.029] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0067.029] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0067.030] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0067.030] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.031] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0067.031] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0067.032] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0067.032] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.033] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0067.033] CloseHandle (hObject=0x350) returned 1 [0067.033] Sleep (dwMilliseconds=0x1f4) [0067.613] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x368 [0067.620] Process32FirstW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0067.620] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0067.621] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0067.621] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0067.622] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0067.622] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0067.623] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0067.623] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0067.624] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0067.624] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.625] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0067.626] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0067.627] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.627] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0067.627] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.628] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.628] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.629] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.629] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.630] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.630] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.631] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.631] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.632] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0067.632] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.633] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.633] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0067.634] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0067.634] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.635] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0067.635] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0067.636] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0067.636] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0067.636] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0067.637] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0067.637] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0067.638] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0067.638] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0067.639] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0067.639] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0067.640] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0067.640] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0067.641] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0067.641] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0067.642] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0067.643] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0067.643] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0067.644] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0067.644] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0067.644] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0067.645] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0067.645] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0067.646] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0067.646] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0067.647] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0067.647] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0067.648] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0067.648] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0067.649] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0067.649] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0067.650] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0067.650] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0067.651] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0067.755] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0067.760] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0067.760] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0067.761] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0067.761] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0067.762] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.763] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0067.763] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0067.764] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0067.764] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0067.765] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0067.765] CloseHandle (hObject=0x368) returned 1 [0067.765] Sleep (dwMilliseconds=0x1f4) [0068.331] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x350 [0068.337] Process32FirstW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0068.337] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0068.338] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0068.338] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0068.339] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0068.339] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0068.340] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0068.340] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0068.341] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0068.341] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.342] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0068.342] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0068.343] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.343] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0068.344] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.344] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.345] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.346] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.346] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.347] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.347] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.348] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.348] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.349] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0068.349] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.350] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.350] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0068.351] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0068.351] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.352] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0068.352] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0068.353] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0068.353] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0068.354] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0068.354] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0068.354] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0068.355] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0068.355] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0068.356] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0068.356] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0068.357] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0068.357] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0068.358] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0068.358] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0068.359] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0068.359] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0068.360] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0068.360] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0068.362] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0068.362] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0068.363] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0068.363] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0068.364] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0068.364] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0068.365] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0068.365] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0068.366] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0068.366] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0068.367] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0068.367] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0068.368] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0068.368] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0068.369] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0068.370] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0068.370] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0068.371] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0068.371] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0068.373] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0068.373] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.374] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0068.374] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0068.375] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0068.375] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0068.376] Process32NextW (in: hSnapshot=0x350, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0068.544] CloseHandle (hObject=0x350) returned 1 [0068.544] Sleep (dwMilliseconds=0x1f4) [0069.307] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0069.312] Process32FirstW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0069.312] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0069.313] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0069.313] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0069.314] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0069.315] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0069.315] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0069.316] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0069.316] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0069.317] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.317] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0069.318] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0069.318] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.319] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0069.319] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.320] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.320] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.321] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.321] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.322] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.322] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.323] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.323] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.324] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0069.324] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.325] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.325] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0069.326] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0069.326] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.327] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0069.327] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0069.328] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0069.328] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0069.329] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0069.329] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0069.330] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0069.331] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0069.331] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0069.332] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0069.332] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0069.333] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0069.333] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0069.334] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0069.334] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0069.335] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0069.335] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0069.336] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0069.336] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0069.337] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0069.337] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0069.338] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0069.338] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0069.339] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0069.339] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0069.339] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0069.340] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0069.340] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0069.341] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0069.341] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0069.342] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0069.343] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0069.343] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0069.344] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0069.344] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0069.345] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0069.455] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0069.456] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0069.456] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0069.458] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.458] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0069.459] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0069.459] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0069.460] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0069.460] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0069.461] CloseHandle (hObject=0x2bc) returned 1 [0069.461] Sleep (dwMilliseconds=0x1f4) [0070.209] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0070.218] Process32FirstW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0070.218] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0070.219] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0070.219] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0070.220] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0070.221] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0070.222] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0070.222] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0070.223] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0070.223] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.224] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0070.224] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0070.225] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.225] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0070.226] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5f, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.226] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.227] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.227] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.227] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.228] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.228] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.229] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.229] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.230] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0070.230] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.231] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.231] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0070.232] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0070.232] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.233] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0070.233] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0070.234] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0070.234] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0070.234] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0070.235] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0070.235] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0070.236] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0070.237] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0070.237] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0070.238] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0070.238] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0070.238] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0070.239] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0070.239] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0070.240] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0070.240] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0070.241] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0070.241] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0070.242] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0070.242] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0070.243] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0070.243] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0070.243] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0070.244] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0070.244] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0070.245] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0070.245] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0070.246] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0070.246] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0070.247] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0070.247] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0070.248] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0070.248] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0070.249] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0070.250] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0070.250] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0070.251] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0070.251] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0070.427] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.428] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0070.429] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0070.429] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0070.430] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0070.430] Process32NextW (in: hSnapshot=0x2bc, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0070.430] CloseHandle (hObject=0x2bc) returned 1 [0070.431] Sleep (dwMilliseconds=0x1f4) [0071.113] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x35c [0071.117] Process32FirstW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0071.118] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0071.118] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0071.119] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0071.119] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0071.120] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0071.120] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0071.121] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0071.121] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0071.122] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.122] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0071.122] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0071.123] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.123] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0071.124] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x60, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.124] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.125] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.125] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.126] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.126] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.128] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.128] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.129] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.130] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0071.130] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.130] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.131] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0071.131] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0071.132] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.132] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0071.133] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0071.133] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0071.134] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0071.134] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0071.135] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0071.135] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0071.136] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0071.136] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0071.136] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0071.137] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0071.137] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0071.138] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0071.138] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0071.139] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0071.139] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0071.140] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0071.140] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0071.141] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0071.141] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0071.141] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0071.142] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0071.143] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0071.144] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0071.144] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0071.145] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0071.145] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0071.146] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0071.146] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0071.147] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0071.147] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0071.148] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0071.148] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0071.149] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0071.149] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0071.150] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0071.151] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0071.151] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0071.152] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0071.152] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.153] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0071.153] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0071.154] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0071.154] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.155] Process32NextW (in: hSnapshot=0x35c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0071.155] CloseHandle (hObject=0x35c) returned 1 [0071.156] Sleep (dwMilliseconds=0x1f4) [0071.982] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x368 [0071.987] Process32FirstW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0071.987] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0071.988] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0071.988] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0071.989] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0071.989] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0071.990] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0071.990] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0071.990] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0071.991] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.991] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0071.992] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0071.992] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.993] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0071.993] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x60, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.994] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.994] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.995] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.995] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.996] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.996] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.996] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.997] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.997] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0071.998] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.998] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0071.999] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0071.999] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0072.000] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.000] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0072.001] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0072.001] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0072.002] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0072.003] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0072.003] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0072.004] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0072.004] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0072.004] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0072.005] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0072.005] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0072.006] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0072.006] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0072.007] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0072.007] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0072.008] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0072.008] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0072.009] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0072.009] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0072.009] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0072.010] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0072.010] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0072.011] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0072.011] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0072.012] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0072.012] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0072.013] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0072.013] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0072.014] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0072.014] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0072.015] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0072.015] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0072.016] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0072.016] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0072.017] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0072.201] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0072.201] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0072.202] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0072.203] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0072.203] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.204] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0072.204] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0072.205] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0072.205] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.206] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0072.206] CloseHandle (hObject=0x368) returned 1 [0072.206] Sleep (dwMilliseconds=0x1f4) [0072.898] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x318 [0072.903] Process32FirstW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0072.904] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0072.904] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0072.905] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0072.905] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0072.906] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0072.906] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0072.907] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0072.908] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0072.908] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.909] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0072.909] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0072.909] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.910] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0072.910] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x60, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.911] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.911] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.912] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.912] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.913] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.913] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.914] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.914] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.915] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0072.915] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.915] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.916] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0072.916] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0072.917] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.917] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0072.918] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0072.918] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0072.919] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0072.919] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0072.920] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0072.920] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0072.921] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0072.921] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0072.921] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0072.922] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0072.922] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0072.923] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0072.923] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0072.924] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0072.924] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0072.925] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0072.926] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0072.926] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0072.927] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0072.927] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0072.928] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0072.928] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0072.928] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0072.929] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0072.929] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0072.930] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0072.930] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0072.931] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0072.931] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0072.932] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0072.932] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0072.933] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0072.933] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0072.934] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0072.935] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0072.935] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0072.936] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0072.936] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0072.937] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.937] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0072.938] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0072.938] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0072.939] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0072.939] Process32NextW (in: hSnapshot=0x318, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0072.940] CloseHandle (hObject=0x318) returned 1 [0072.940] Sleep (dwMilliseconds=0x1f4) [0073.595] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x304 [0073.624] Process32FirstW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0073.624] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0073.625] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0073.625] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0073.625] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0073.626] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0073.626] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0073.627] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0073.628] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0073.634] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.634] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0073.635] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0073.635] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.636] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0073.636] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5f, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.637] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.637] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.638] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.638] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.639] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.639] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.640] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.640] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.641] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0073.641] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.642] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.678] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0073.678] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0073.679] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.679] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0073.680] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0073.680] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0073.681] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0073.681] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0073.682] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0073.682] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0073.683] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0073.683] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0073.683] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0073.684] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0073.684] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0073.685] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0073.685] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0073.686] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0073.686] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0073.687] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0073.687] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0073.688] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0073.688] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0073.689] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0073.689] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0073.690] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0073.690] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0073.925] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0073.926] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0073.926] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0073.927] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0073.927] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0073.928] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0073.928] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0073.929] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0073.930] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0073.930] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0073.931] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0073.931] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0073.938] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0073.939] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0073.939] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0073.940] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.941] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0073.941] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0073.942] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0073.942] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0073.943] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0073.943] CloseHandle (hObject=0x304) returned 1 [0073.944] Sleep (dwMilliseconds=0x1f4) [0074.664] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x368 [0074.669] Process32FirstW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0074.669] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0074.670] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0074.670] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.671] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0074.671] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0074.672] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0074.672] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0074.673] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0074.673] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.674] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0074.674] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0074.674] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.675] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0074.676] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5f, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.676] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.677] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.677] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.678] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.678] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.679] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.679] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.680] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.680] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0074.680] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.681] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.682] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0074.682] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0074.682] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.683] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0074.683] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0074.684] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0074.684] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0074.685] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0074.685] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0074.686] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0074.686] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0074.687] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0074.687] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0074.688] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0074.688] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0074.688] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0074.689] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0074.689] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0074.690] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0074.690] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0074.691] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0074.691] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0074.692] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0074.692] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0074.693] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0074.693] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0074.694] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0074.694] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0074.695] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0074.695] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0074.696] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0074.696] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0074.697] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0074.697] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0074.698] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0074.698] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0074.797] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0074.797] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0074.798] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0074.802] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0074.802] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.803] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.803] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.804] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0074.804] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0074.805] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0074.805] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0074.806] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0074.807] CloseHandle (hObject=0x368) returned 1 [0074.807] Sleep (dwMilliseconds=0x1f4) [0075.992] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x31c [0076.224] Process32FirstW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0076.224] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0076.225] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0076.225] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0076.226] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0076.226] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0076.227] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0076.227] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0076.228] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0076.228] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.229] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0076.229] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0076.229] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.230] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0076.230] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.231] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.231] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.232] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.232] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.233] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.233] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.234] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.234] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.235] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0076.235] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.236] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.236] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0076.237] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0076.238] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.238] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0076.239] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0076.239] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0076.239] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0076.240] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0076.240] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0076.241] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0076.241] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0076.242] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0076.242] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0076.243] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0076.243] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0076.244] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0076.244] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0076.245] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0076.245] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0076.246] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0076.246] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0076.247] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0076.247] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0076.248] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0076.248] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0076.249] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0076.249] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0076.250] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0076.250] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0076.251] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0076.251] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0076.251] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0076.252] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0076.253] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0076.428] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0076.429] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0076.430] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0076.430] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0076.431] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0076.431] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0076.432] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0076.432] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0076.433] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.434] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0076.434] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0076.435] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0076.435] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0076.436] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0 [0076.436] CloseHandle (hObject=0x31c) returned 1 [0076.436] Sleep (dwMilliseconds=0x1f4) [0077.104] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x304 [0077.111] Process32FirstW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0077.111] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0077.112] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0077.113] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0077.113] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0077.114] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0077.114] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0077.115] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0077.115] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0077.116] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.116] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0077.117] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0077.117] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.117] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0077.118] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.119] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.120] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.121] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.143] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.144] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.145] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.145] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.145] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.146] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0077.146] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.147] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.147] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0077.148] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0077.148] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.149] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0077.149] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0077.150] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0077.150] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0077.151] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0077.151] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0077.152] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0077.152] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0077.152] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0077.156] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0077.157] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0077.157] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0077.158] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0077.158] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0077.159] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0077.160] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0077.160] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0077.160] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0077.161] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0077.161] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0077.162] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0077.162] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0077.163] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0077.163] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0077.164] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0077.164] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0077.165] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0077.165] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0077.166] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0077.166] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0077.167] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0077.167] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0077.168] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0077.168] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0077.169] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0077.170] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0077.170] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0077.171] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0077.171] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0077.172] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.172] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0077.173] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0077.173] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0077.174] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.174] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0077.175] Process32NextW (in: hSnapshot=0x304, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0077.176] CloseHandle (hObject=0x304) returned 1 [0077.176] Sleep (dwMilliseconds=0x1f4) [0077.798] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x368 [0077.826] Process32FirstW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0077.826] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0077.827] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0077.827] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0077.828] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0077.828] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0077.829] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0077.829] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0077.830] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0077.830] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.830] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0077.831] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0077.832] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.833] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0077.833] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.834] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.834] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.835] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.835] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.836] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.836] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.837] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.837] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.838] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0077.838] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.839] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.839] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0077.840] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0077.840] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0077.841] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0077.841] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0077.842] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0077.842] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0077.843] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0077.843] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0077.844] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0077.844] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0077.844] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0077.845] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0077.845] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0077.846] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0077.846] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0077.923] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0077.923] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0077.924] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0077.924] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0077.978] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0077.980] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0077.990] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0077.991] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0077.992] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0077.994] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0078.004] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0078.005] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0078.012] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0078.017] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0078.018] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0078.020] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0078.032] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0078.032] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0078.033] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0078.034] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0078.034] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0078.035] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0078.035] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0078.036] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0078.037] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0078.037] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0078.038] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.038] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0078.039] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0078.039] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0078.040] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.040] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0078.041] Process32NextW (in: hSnapshot=0x368, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0 [0078.042] CloseHandle (hObject=0x368) returned 1 [0078.042] Sleep (dwMilliseconds=0x1f4) [0078.643] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x370 [0078.681] Process32FirstW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0078.681] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0078.682] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0078.683] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0078.683] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0078.684] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0078.684] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0078.685] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0078.685] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0078.686] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.686] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0078.687] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0078.688] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.688] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0078.689] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.689] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.690] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.690] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.691] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.691] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.692] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.692] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.692] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.693] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0078.693] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.694] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.694] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0078.695] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0078.695] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.696] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0078.696] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0078.697] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0078.697] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0078.698] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0078.698] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0078.699] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0078.699] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0078.700] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0078.700] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0078.701] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0078.701] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0078.702] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0078.702] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0078.703] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0078.703] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0078.704] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0078.704] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0078.705] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0078.705] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0078.705] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0078.706] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0078.706] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0078.707] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0078.707] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0078.708] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0078.708] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0078.709] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0078.709] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0078.710] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0078.710] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0078.711] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0078.712] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0078.712] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0078.713] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0078.714] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0078.714] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0078.715] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0078.716] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0078.716] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0078.717] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0078.717] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0079.008] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0079.016] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.016] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0079.017] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0079.017] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 0 [0079.018] CloseHandle (hObject=0x370) returned 1 [0079.018] Sleep (dwMilliseconds=0x1f4) [0079.716] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x374 [0079.763] Process32FirstW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0079.763] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0079.764] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0079.764] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0079.765] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0079.765] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0079.766] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0079.766] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0079.767] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0079.767] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.767] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0079.768] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0079.768] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.769] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0079.769] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.770] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.770] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.771] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.772] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.772] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.772] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.773] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.773] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.774] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0079.774] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.775] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.775] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0079.776] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0079.776] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0079.777] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0079.777] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0079.778] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0079.778] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0079.778] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0079.779] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0079.779] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0079.780] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0079.781] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0079.781] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0079.782] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0079.782] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0079.783] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0079.783] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0079.784] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0079.786] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0079.787] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0079.787] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0079.788] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0079.788] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0079.788] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0079.789] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0079.789] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0079.790] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0079.791] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0079.791] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0079.791] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0079.792] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0079.792] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0079.793] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0079.793] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0079.794] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0079.795] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0079.795] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0080.056] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0080.056] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0080.057] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0080.057] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0080.058] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0080.059] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.059] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0080.060] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0080.060] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0080.061] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.062] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0080.062] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0080.063] Process32NextW (in: hSnapshot=0x374, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 0 [0080.063] CloseHandle (hObject=0x374) returned 1 [0080.063] Sleep (dwMilliseconds=0x1f4) [0080.597] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x31c [0080.602] Process32FirstW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0080.602] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0080.603] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0080.603] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0080.604] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0080.604] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0080.605] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0080.605] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0080.606] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0080.606] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.607] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0080.607] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0080.608] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.608] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0080.609] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.609] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.610] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.610] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.611] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.611] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.612] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.612] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.612] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.613] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0080.613] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.614] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.614] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0080.615] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0080.615] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.616] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0080.616] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0080.617] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0080.617] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0080.618] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0080.618] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0080.619] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0080.619] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0080.619] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0080.620] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0080.620] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0080.621] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0080.621] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0080.622] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0080.622] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1 [0080.623] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0080.623] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0080.624] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0080.625] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0080.625] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0080.626] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0080.626] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0080.627] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0080.627] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0080.628] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0080.628] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0080.629] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0080.629] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0080.630] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0080.630] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0080.631] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0080.631] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0080.632] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0080.633] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0080.633] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0080.634] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0080.634] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0080.635] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0080.636] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0080.636] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.637] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0080.637] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0080.638] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0080.638] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0080.639] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0080.640] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0080.640] Process32NextW (in: hSnapshot=0x31c, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 0 [0080.641] CloseHandle (hObject=0x31c) returned 1 [0080.641] Sleep (dwMilliseconds=0x1f4) [0081.239] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x370 [0081.302] Process32FirstW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0081.303] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0081.303] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0081.304] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0081.304] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0081.305] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0081.305] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0081.306] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0081.306] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0081.307] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.307] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0081.307] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1 [0081.308] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.308] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0081.309] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5e, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.309] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.310] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.310] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.311] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x26, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.311] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.312] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.313] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.313] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.314] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0081.314] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.315] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.315] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0081.315] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0081.316] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.316] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0081.317] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0081.317] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1 [0081.318] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x41, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0081.318] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1 [0081.319] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0081.319] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0081.320] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0081.320] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0081.321] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0081.321] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1 [0081.322] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0081.322] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0081.322] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1 [0081.323] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1 [0081.323] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1 [0081.324] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaverfireplace.exe")) returned 1 [0081.324] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="suite_xml.exe")) returned 1 [0081.325] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="buyingdefeat.exe")) returned 1 [0081.325] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surveillance governments.exe")) returned 1 [0081.402] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="legendsict.exe")) returned 1 [0081.403] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archived-deemed-shirts.exe")) returned 1 [0081.403] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="mug.exe")) returned 1 [0081.404] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="petition-swap.exe")) returned 1 [0081.404] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="centre_quantum_appeals.exe")) returned 1 [0081.405] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="powers_mixture_bidding.exe")) returned 1 [0081.405] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="customs.exe")) returned 1 [0081.406] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="crest-boating.exe")) returned 1 [0081.406] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0081.407] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="disagreelettingweekly.exe")) returned 1 [0081.407] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="lightningdrama.exe")) returned 1 [0081.408] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0081.408] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="feed-canada-lamps.exe")) returned 1 [0081.409] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted.exe")) returned 1 [0081.410] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb6c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="gziplibs.exe")) returned 1 [0081.410] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="coming.exe")) returned 1 [0081.411] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa28, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xfd0, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0081.412] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xff8, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0081.412] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xaec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.413] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x12c, pcPriClassBase=4, dwFlags=0x0, szExeFile="CompatTelRunner.exe")) returned 1 [0081.413] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xf18, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0081.414] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x9d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0081.414] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0081.415] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1 [0081.415] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0081.416] Process32NextW (in: hSnapshot=0x370, lppe=0x4c2fb10 | out: lppe=0x4c2fb10*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xca0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 0 [0081.416] CloseHandle (hObject=0x370) returned 1 [0081.417] Sleep (dwMilliseconds=0x1f4) Thread: id = 14 os_tid = 0xefc [0054.014] GetProcessHeap () returned 0x3150000 [0054.014] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x21a) returned 0x3175530 [0054.014] GetProcessHeap () returned 0x3150000 [0054.014] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x28) returned 0x3160640 [0054.014] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x248 [0054.014] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x24c [0054.015] GetComputerNameW (in: lpBuffer=0x3175540, nSize=0x4cafc18 | out: lpBuffer="NQDPDE", nSize=0x4cafc18) returned 1 [0054.015] GetProcessHeap () returned 0x3150000 [0054.015] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x316fc40 [0054.015] GetProcessHeap () returned 0x3150000 [0054.015] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x4000) returned 0x3175758 [0054.015] GetProcessHeap () returned 0x3150000 [0054.015] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3179760 [0054.015] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x4cafbcc | out: lphEnum=0x4cafbcc*=0x3170800) returned 0x0 [0056.501] WNetEnumResourceW (in: hEnum=0x3170800, lpcCount=0x4cafbc0, lpBuffer=0x3175758, lpBufferSize=0x4cafbd4 | out: lpcCount=0x4cafbc0, lpBuffer=0x3175758, lpBufferSize=0x4cafbd4) returned 0x103 [0056.501] WNetCloseEnum (hEnum=0x3170800) returned 0x0 [0056.501] GetProcessHeap () returned 0x3150000 [0056.501] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0056.501] GetProcessHeap () returned 0x3150000 [0056.501] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3179760 | out: hHeap=0x3150000) returned 1 [0056.502] GetProcessHeap () returned 0x3150000 [0056.502] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x4000) returned 0x57e2c18 [0056.503] GetProcessHeap () returned 0x3150000 [0056.503] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.503] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x4cafbb4 | out: lphEnum=0x4cafbb4*=0x3160ea8) returned 0x0 [0056.504] WNetEnumResourceW (in: hEnum=0x3160ea8, lpcCount=0x4cafba8, lpBuffer=0x57e2c18, lpBufferSize=0x4cafbbc | out: lpcCount=0x4cafba8, lpBuffer=0x57e2c18, lpBufferSize=0x4cafbbc) returned 0x103 [0056.504] WNetCloseEnum (hEnum=0x3160ea8) returned 0x0 [0056.504] GetProcessHeap () returned 0x3150000 [0056.504] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e2c18 | out: hHeap=0x3150000) returned 1 [0056.504] GetProcessHeap () returned 0x3150000 [0056.504] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.504] GetProcessHeap () returned 0x3150000 [0056.504] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x4000) returned 0x57e2c18 [0056.504] GetProcessHeap () returned 0x3150000 [0056.504] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.504] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x4cafb9c | out: lphEnum=0x4cafb9c*=0x31706a0) returned 0x0 [0070.113] WNetEnumResourceW (in: hEnum=0x31706a0, lpcCount=0x4cafb90, lpBuffer=0x57e2c18, lpBufferSize=0x4cafba4 | out: lpcCount=0x4cafb90, lpBuffer=0x57e2c18, lpBufferSize=0x4cafba4) returned 0x0 [0070.114] GetProcessHeap () returned 0x3150000 [0070.114] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x4000) returned 0x57fac48 [0070.114] GetProcessHeap () returned 0x3150000 [0070.114] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0070.114] WNetOpenEnumW (dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x57e2c18, lphEnum=0x4cafb54) Thread: id = 15 os_tid = 0xa8c [0054.640] GetLogicalDrives () returned 0x4 [0054.640] GetProcessHeap () returned 0x3150000 [0054.640] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x315e0e8 [0054.640] GetProcessHeap () returned 0x3150000 [0054.640] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x28) returned 0x3160700 [0054.640] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x264 [0054.640] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x268 [0054.640] GetProcessHeap () returned 0x3150000 [0054.640] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x316fb00 [0054.640] GetProcessHeap () returned 0x3150000 [0054.640] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x316fd80 [0054.640] GetProcessHeap () returned 0x3150000 [0054.640] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x316fbf0 [0054.640] GetProcessHeap () returned 0x3150000 [0054.640] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318b270 [0054.640] GetProcessHeap () returned 0x3150000 [0054.640] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b270 | out: hHeap=0x3150000) returned 1 [0054.640] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x316fd80, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0054.640] GetProcessHeap () returned 0x3150000 [0054.640] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fbf0 | out: hHeap=0x3150000) returned 1 [0054.640] GetProcessHeap () returned 0x3150000 [0054.640] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fb00 | out: hHeap=0x3150000) returned 1 [0054.640] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x4d5fa54, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x4d5fa54*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0054.641] GetProcessHeap () returned 0x3150000 [0054.641] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fd80 | out: hHeap=0x3150000) returned 1 [0054.641] GetProcessHeap () returned 0x3150000 [0054.641] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170e18 [0054.641] GetProcessHeap () returned 0x3150000 [0054.641] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170fb0 [0054.641] GetProcessHeap () returned 0x3150000 [0054.641] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170e90 [0054.641] GetProcessHeap () returned 0x3150000 [0054.641] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318b308 [0054.641] GetProcessHeap () returned 0x3150000 [0054.641] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170fc8 [0054.641] htonl (hostlong=0xb4197730) returned 0x307719b4 [0054.641] QueryPerformanceCounter (in: lpPerformanceCount=0x4d5f950 | out: lpPerformanceCount=0x4d5f950*=14581761987) returned 1 [0054.641] GetTickCount () returned 0x114e1f5 [0054.641] GetCurrentProcessId () returned 0x6c0 [0054.641] GetCurrentThreadId () returned 0xa8c [0054.641] GetLocalTime (in: lpSystemTime=0x4d5f938 | out: lpSystemTime=0x4d5f938*(wYear=0x7e3, wMonth=0xb, wDayOfWeek=0x1, wDay=0x4, wHour=0x17, wMinute=0x38, wSecond=0x2c, wMilliseconds=0x204)) [0054.641] SystemTimeToFileTime (in: lpSystemTime=0x4d5f938, lpFileTime=0x4d5f948 | out: lpFileTime=0x4d5f948) returned 1 [0054.641] QueryPerformanceCounter (in: lpPerformanceCount=0x4d5f950 | out: lpPerformanceCount=0x4d5f950*=14581783575) returned 1 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x28) returned 0x3160730 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170e60 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x4) returned 0x318ba40 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x14) returned 0x3160e68 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170f20 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x80) returned 0x3189b88 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x31710e8 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x82) returned 0x3158ee0 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170fe0 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x4) returned 0x318ba30 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170ff8 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x80) returned 0x3158cc8 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3171010 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x2) returned 0x318ba10 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x4) returned 0x318b8e0 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3171040 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x80) returned 0x3158d50 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3171058 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x4) returned 0x318b8f0 [0054.642] GetProcessHeap () returned 0x3150000 [0054.642] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x318ba10, Size=0x82) returned 0x315a670 [0054.643] GetProcessHeap () returned 0x3150000 [0054.643] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x318b8f0, Size=0x100) returned 0x31539e8 [0054.643] GetProcessHeap () returned 0x3150000 [0054.643] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170e00 [0054.643] GetProcessHeap () returned 0x3150000 [0054.643] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x82) returned 0x315a700 [0054.643] GetProcessHeap () returned 0x3150000 [0054.643] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170e30 [0054.643] GetProcessHeap () returned 0x3150000 [0054.643] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x82) returned 0x318ba78 [0054.643] GetProcessHeap () returned 0x3150000 [0054.643] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x315a670, Size=0x104) returned 0x318bb08 [0054.643] GetProcessHeap () returned 0x3150000 [0054.643] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x31539e8, Size=0x200) returned 0x318bc18 [0054.644] GetProcessHeap () returned 0x3150000 [0054.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b8e0 | out: hHeap=0x3150000) returned 1 [0054.644] GetProcessHeap () returned 0x3150000 [0054.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318bc18 | out: hHeap=0x3150000) returned 1 [0054.644] GetProcessHeap () returned 0x3150000 [0054.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3171058 | out: hHeap=0x3150000) returned 1 [0054.644] GetProcessHeap () returned 0x3150000 [0054.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3158cc8 | out: hHeap=0x3150000) returned 1 [0054.644] GetProcessHeap () returned 0x3150000 [0054.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170ff8 | out: hHeap=0x3150000) returned 1 [0054.644] GetProcessHeap () returned 0x3150000 [0054.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3158d50 | out: hHeap=0x3150000) returned 1 [0054.644] GetProcessHeap () returned 0x3150000 [0054.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3171040 | out: hHeap=0x3150000) returned 1 [0054.644] GetProcessHeap () returned 0x3150000 [0054.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318bb08 | out: hHeap=0x3150000) returned 1 [0054.644] GetProcessHeap () returned 0x3150000 [0054.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3171010 | out: hHeap=0x3150000) returned 1 [0054.644] GetProcessHeap () returned 0x3150000 [0054.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315a700 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170e00 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318ba78 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170e30 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318ba40 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170e60 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3158ee0 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31710e8 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3189b88 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170f20 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318ba30 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170fe0 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3160730 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3160e68 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0xa4) returned 0x31599b8 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170fb0 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170e90 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b308 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170fc8 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170e18 | out: hHeap=0x3150000) returned 1 [0054.645] GetProcessHeap () returned 0x3150000 [0054.645] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x14) returned 0x3160dc8 [0054.645] GetProcessHeap () returned 0x3150000 [0054.646] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0xe) returned 0x3170fc8 [0054.646] ResetEvent (hEvent=0x268) returned 1 [0054.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x404a4c, lpParameter=0x3160dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26c [0054.646] CloseHandle (hObject=0x26c) returned 1 [0054.646] GetProcessHeap () returned 0x3150000 [0054.646] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170fb0 [0054.646] GetProcessHeap () returned 0x3150000 [0054.646] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3171010 [0054.646] GetProcessHeap () returned 0x3150000 [0054.646] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x31710e8 [0054.646] GetProcessHeap () returned 0x3150000 [0054.646] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318b1d8 [0054.646] GetProcessHeap () returned 0x3150000 [0054.646] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170ff8 [0054.646] htonl (hostlong=0xb4197730) returned 0x307719b4 [0054.646] GetProcessHeap () returned 0x3150000 [0054.646] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x28) returned 0x3160730 [0054.646] GetProcessHeap () returned 0x3150000 [0054.646] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170e90 [0054.646] GetProcessHeap () returned 0x3150000 [0054.646] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x4) returned 0x318b6f0 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x14) returned 0x3160fe8 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3171040 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x80) returned 0x3189b88 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170e00 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x82) returned 0x3158ee0 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170e18 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x4) returned 0x318b880 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170e30 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x80) returned 0x3158cc8 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3171058 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x2) returned 0x318b6e0 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x4) returned 0x318b820 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170e48 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x80) returned 0x3158d50 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170e60 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x4) returned 0x318b710 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x318b6e0, Size=0x82) returned 0x315a670 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x318b710, Size=0x100) returned 0x31539e8 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170f20 [0054.647] GetProcessHeap () returned 0x3150000 [0054.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x82) returned 0x315a700 [0054.648] GetProcessHeap () returned 0x3150000 [0054.648] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10) returned 0x3170ea8 [0054.648] GetProcessHeap () returned 0x3150000 [0054.648] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x82) returned 0x318ba78 [0054.648] GetProcessHeap () returned 0x3150000 [0054.648] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x315a670, Size=0x104) returned 0x318bb08 [0054.648] GetProcessHeap () returned 0x3150000 [0054.648] RtlReAllocateHeap (Heap=0x3150000, Flags=0x0, Ptr=0x31539e8, Size=0x200) returned 0x318bc18 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b820 | out: hHeap=0x3150000) returned 1 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318bc18 | out: hHeap=0x3150000) returned 1 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170e60 | out: hHeap=0x3150000) returned 1 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3158cc8 | out: hHeap=0x3150000) returned 1 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170e30 | out: hHeap=0x3150000) returned 1 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3158d50 | out: hHeap=0x3150000) returned 1 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170e48 | out: hHeap=0x3150000) returned 1 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318bb08 | out: hHeap=0x3150000) returned 1 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3171058 | out: hHeap=0x3150000) returned 1 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x315a700 | out: hHeap=0x3150000) returned 1 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170f20 | out: hHeap=0x3150000) returned 1 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318ba78 | out: hHeap=0x3150000) returned 1 [0054.649] GetProcessHeap () returned 0x3150000 [0054.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170ea8 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b6f0 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170e90 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3158ee0 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170e00 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3189b88 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3171040 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b880 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170e18 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3160730 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3160fe8 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0xa4) returned 0x3159b18 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3171010 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31710e8 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b1d8 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170ff8 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170fb0 | out: hHeap=0x3150000) returned 1 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x14) returned 0x3160fa8 [0054.650] GetProcessHeap () returned 0x3150000 [0054.650] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0xe) returned 0x3170e48 [0054.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x404a4c, lpParameter=0x3160fa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x26c [0054.651] CloseHandle (hObject=0x26c) returned 1 [0054.652] WaitForSingleObject (hHandle=0x268, dwMilliseconds=0xffffffff) Thread: id = 16 os_tid = 0x468 [0054.652] GetLogicalDrives () returned 0x4 [0054.652] GetProcessHeap () returned 0x3150000 [0054.652] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x20) returned 0x316fce0 [0054.652] GetProcessHeap () returned 0x3150000 [0054.652] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x8, Size=0x1e) returned 0x316fcb8 [0054.652] GetProcessHeap () returned 0x3150000 [0054.652] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x1e) returned 0x316fb00 [0054.652] GetProcessHeap () returned 0x3150000 [0054.652] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x90) returned 0x318b308 [0054.653] GetProcessHeap () returned 0x3150000 [0054.653] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x318b308 | out: hHeap=0x3150000) returned 1 [0054.653] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%\\", lpDst=0x316fcb8, nSize=0xf | out: lpDst="C:\\") returned 0x4 [0054.653] GetProcessHeap () returned 0x3150000 [0054.653] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fb00 | out: hHeap=0x3150000) returned 1 [0054.653] GetProcessHeap () returned 0x3150000 [0054.653] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fce0 | out: hHeap=0x3150000) returned 1 [0054.653] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x52ef7cc, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x52ef7cc*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0054.653] GetProcessHeap () returned 0x3150000 [0054.653] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x316fcb8 | out: hHeap=0x3150000) returned 1 [0054.653] GetProcessHeap () returned 0x3150000 [0054.653] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x40) returned 0x315dcf8 [0054.653] GetProcessHeap () returned 0x3150000 [0054.653] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x28) returned 0x3160730 [0054.653] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x26c [0054.653] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x270 [0054.653] GetLogicalDrives () returned 0x4 [0054.653] Sleep (dwMilliseconds=0x3e8) [0055.812] GetLogicalDrives () returned 0x4 [0055.812] Sleep (dwMilliseconds=0x3e8) [0057.014] GetLogicalDrives () returned 0x4 [0057.014] Sleep (dwMilliseconds=0x3e8) [0058.192] GetLogicalDrives () returned 0x4 [0058.192] Sleep (dwMilliseconds=0x3e8) [0059.379] GetLogicalDrives () returned 0x4 [0059.379] Sleep (dwMilliseconds=0x3e8) [0061.013] GetLogicalDrives () returned 0x4 [0061.013] Sleep (dwMilliseconds=0x3e8) [0062.401] GetLogicalDrives () returned 0x4 [0062.401] Sleep (dwMilliseconds=0x3e8) [0063.734] GetLogicalDrives () returned 0x4 [0063.734] Sleep (dwMilliseconds=0x3e8) [0065.072] GetLogicalDrives () returned 0x4 [0065.072] Sleep (dwMilliseconds=0x3e8) [0066.257] GetLogicalDrives () returned 0x4 [0066.257] Sleep (dwMilliseconds=0x3e8) [0067.375] GetLogicalDrives () returned 0x4 [0067.375] Sleep (dwMilliseconds=0x3e8) [0068.544] GetLogicalDrives () returned 0x4 [0068.544] Sleep (dwMilliseconds=0x3e8) [0069.682] GetLogicalDrives () returned 0x4 [0069.682] Sleep (dwMilliseconds=0x3e8) [0070.961] GetLogicalDrives () returned 0x4 [0071.003] Sleep (dwMilliseconds=0x3e8) [0072.200] GetLogicalDrives () returned 0x4 [0072.200] Sleep (dwMilliseconds=0x3e8) [0073.328] GetLogicalDrives () returned 0x4 [0073.330] Sleep (dwMilliseconds=0x3e8) [0074.570] GetLogicalDrives () returned 0x4 [0074.571] Sleep (dwMilliseconds=0x3e8) [0075.992] GetLogicalDrives () returned 0x4 [0075.992] Sleep (dwMilliseconds=0x3e8) [0077.181] GetLogicalDrives () returned 0x4 [0077.181] Sleep (dwMilliseconds=0x3e8) [0078.272] GetLogicalDrives () returned 0x4 [0078.272] Sleep (dwMilliseconds=0x3e8) [0079.511] GetLogicalDrives () returned 0x4 [0079.512] Sleep (dwMilliseconds=0x3e8) [0080.578] GetLogicalDrives () returned 0x4 [0080.579] Sleep (dwMilliseconds=0x3e8) Thread: id = 17 os_tid = 0x47c [0055.025] GetProcessHeap () returned 0x3150000 [0055.025] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x38) returned 0x3162ef8 [0055.025] GetProcessHeap () returned 0x3150000 [0055.025] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x18) returned 0x3160e68 [0055.025] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x284 [0055.025] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x288 [0055.025] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x28c [0055.025] GetProcessHeap () returned 0x3150000 [0055.025] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x318d010 [0055.025] GetProcessHeap () returned 0x3150000 [0055.025] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x50) returned 0x31706f8 [0055.025] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0055.025] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0055.026] Wow64DisableWow64FsRedirection (in: OldValue=0x536fca4 | out: OldValue=0x536fca4*=0x0) returned 1 [0055.026] GetProcessHeap () returned 0x3150000 [0055.026] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31706f8 | out: hHeap=0x3150000) returned 1 [0055.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x4048ba, lpParameter=0x536fca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x290 [0055.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x4048ba, lpParameter=0x536fca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x294 [0055.027] GetProcessHeap () returned 0x3150000 [0055.027] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x319d018 [0055.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x536fa18 | out: lpFindFileData=0x536fa18*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3170705, dwReserved1=0x75e90100, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x3162bb8 [0055.027] GetProcessHeap () returned 0x3150000 [0055.027] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ad020 [0055.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.032] FindNextFileW (in: hFindFile=0x3162f78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0055.032] FindNextFileW (in: hFindFile=0x3162f78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Logs", cAlternateFileName="")) returned 1 [0055.032] GetProcessHeap () returned 0x3150000 [0055.032] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31de920 [0055.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.037] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0055.037] SetEvent (hEvent=0x288) returned 1 [0055.037] ResetEvent (hEvent=0x28c) returned 1 [0055.038] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0055.038] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0055.038] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0055.038] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.040] GetProcessHeap () returned 0x3150000 [0055.040] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31de920 | out: hHeap=0x3150000) returned 1 [0055.041] FindNextFileW (in: hFindFile=0x3162f78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0055.041] GetProcessHeap () returned 0x3150000 [0055.041] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31de920 [0055.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.044] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.044] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0055.044] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0055.044] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0055.044] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0055.044] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0055.044] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0055.052] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.053] GetProcessHeap () returned 0x3150000 [0055.053] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31de920 | out: hHeap=0x3150000) returned 1 [0055.054] FindNextFileW (in: hFindFile=0x3162f78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0055.054] FindClose (in: hFindFile=0x3162f78 | out: hFindFile=0x3162f78) returned 1 [0055.054] GetProcessHeap () returned 0x3150000 [0055.054] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ad020 | out: hHeap=0x3150000) returned 1 [0055.055] FindNextFileW (in: hFindFile=0x3162bb8, lpFindFileData=0x536fa18 | out: lpFindFileData=0x536fa18*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3170705, dwReserved1=0x75e90100, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0055.055] GetProcessHeap () returned 0x3150000 [0055.055] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ad020 [0055.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.055] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0055.056] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0055.056] GetProcessHeap () returned 0x3150000 [0055.056] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.056] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.056] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0055.057] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0055.057] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.057] GetProcessHeap () returned 0x3150000 [0055.057] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.057] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0055.057] GetProcessHeap () returned 0x3150000 [0055.057] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31629b8 [0055.058] FindNextFileW (in: hFindFile=0x31629b8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.058] FindNextFileW (in: hFindFile=0x31629b8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0055.058] FindNextFileW (in: hFindFile=0x31629b8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0055.058] FindClose (in: hFindFile=0x31629b8 | out: hFindFile=0x31629b8) returned 1 [0055.058] GetProcessHeap () returned 0x3150000 [0055.058] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.058] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0055.058] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.058] GetProcessHeap () returned 0x3150000 [0055.058] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ad020 | out: hHeap=0x3150000) returned 1 [0055.059] FindNextFileW (in: hFindFile=0x3162bb8, lpFindFileData=0x536fa18 | out: lpFindFileData=0x536fa18*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3170705, dwReserved1=0x75e90100, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0055.059] FindNextFileW (in: hFindFile=0x3162bb8, lpFindFileData=0x536fa18 | out: lpFindFileData=0x536fa18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3170705, dwReserved1=0x75e90100, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0055.061] GetProcessHeap () returned 0x3150000 [0055.061] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ad020 [0055.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.062] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0055.063] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1025", cAlternateFileName="")) returned 1 [0055.063] GetProcessHeap () returned 0x3150000 [0055.063] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.067] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.068] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.068] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.068] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.068] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.068] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.068] GetProcessHeap () returned 0x3150000 [0055.068] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.069] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1028", cAlternateFileName="")) returned 1 [0055.069] GetProcessHeap () returned 0x3150000 [0055.069] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.071] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.071] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.071] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.071] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.072] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.072] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.072] GetProcessHeap () returned 0x3150000 [0055.072] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.073] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1029", cAlternateFileName="")) returned 1 [0055.073] GetProcessHeap () returned 0x3150000 [0055.073] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.075] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.075] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.075] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.075] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.075] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.075] FindClose (in: hFindFile=0x3162df8 | out: hFindFile=0x3162df8) returned 1 [0055.076] GetProcessHeap () returned 0x3150000 [0055.076] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.076] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1030", cAlternateFileName="")) returned 1 [0055.076] GetProcessHeap () returned 0x3150000 [0055.076] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31629b8 [0055.079] FindNextFileW (in: hFindFile=0x31629b8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x31629b8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x31629b8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x31629b8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x31629b8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.079] FindClose (in: hFindFile=0x31629b8 | out: hFindFile=0x31629b8) returned 1 [0055.079] GetProcessHeap () returned 0x3150000 [0055.079] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1031", cAlternateFileName="")) returned 1 [0055.080] GetProcessHeap () returned 0x3150000 [0055.080] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.082] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.083] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.083] GetProcessHeap () returned 0x3150000 [0055.083] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.084] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1032", cAlternateFileName="")) returned 1 [0055.084] GetProcessHeap () returned 0x3150000 [0055.084] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.086] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.086] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.086] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.086] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.086] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.086] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.087] GetProcessHeap () returned 0x3150000 [0055.087] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.087] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1033", cAlternateFileName="")) returned 1 [0055.087] GetProcessHeap () returned 0x3150000 [0055.087] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.089] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.089] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.090] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.090] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.090] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.090] FindClose (in: hFindFile=0x3162e78 | out: hFindFile=0x3162e78) returned 1 [0055.091] GetProcessHeap () returned 0x3150000 [0055.091] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.091] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1035", cAlternateFileName="")) returned 1 [0055.091] GetProcessHeap () returned 0x3150000 [0055.091] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.092] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.099] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.099] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.099] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.099] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.099] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.099] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.368] GetProcessHeap () returned 0x3150000 [0055.368] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.368] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1036", cAlternateFileName="")) returned 1 [0055.368] GetProcessHeap () returned 0x3150000 [0055.368] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.369] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.369] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.369] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.369] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.369] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.369] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.369] GetProcessHeap () returned 0x3150000 [0055.369] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.369] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1037", cAlternateFileName="")) returned 1 [0055.370] GetProcessHeap () returned 0x3150000 [0055.370] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.370] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.370] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.370] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.370] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.370] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.370] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.370] GetProcessHeap () returned 0x3150000 [0055.370] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.370] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1038", cAlternateFileName="")) returned 1 [0055.370] GetProcessHeap () returned 0x3150000 [0055.370] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.371] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.371] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.371] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.371] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.371] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.371] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.371] GetProcessHeap () returned 0x3150000 [0055.371] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.371] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1040", cAlternateFileName="")) returned 1 [0055.371] GetProcessHeap () returned 0x3150000 [0055.371] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.372] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.372] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.372] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.372] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.372] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.373] FindClose (in: hFindFile=0x3162df8 | out: hFindFile=0x3162df8) returned 1 [0055.373] GetProcessHeap () returned 0x3150000 [0055.373] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.373] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1041", cAlternateFileName="")) returned 1 [0055.373] GetProcessHeap () returned 0x3150000 [0055.373] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.373] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.373] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.374] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.374] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.374] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.374] FindClose (in: hFindFile=0x3162e78 | out: hFindFile=0x3162e78) returned 1 [0055.374] GetProcessHeap () returned 0x3150000 [0055.374] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.374] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1042", cAlternateFileName="")) returned 1 [0055.374] GetProcessHeap () returned 0x3150000 [0055.374] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.374] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.374] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.374] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.375] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.375] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.375] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.375] GetProcessHeap () returned 0x3150000 [0055.375] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.375] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1043", cAlternateFileName="")) returned 1 [0055.375] GetProcessHeap () returned 0x3150000 [0055.375] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.375] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.375] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.375] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.375] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.376] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.376] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.376] GetProcessHeap () returned 0x3150000 [0055.376] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.376] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1044", cAlternateFileName="")) returned 1 [0055.376] GetProcessHeap () returned 0x3150000 [0055.376] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.376] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.376] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.377] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.377] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.377] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.377] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.377] GetProcessHeap () returned 0x3150000 [0055.377] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.377] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1045", cAlternateFileName="")) returned 1 [0055.377] GetProcessHeap () returned 0x3150000 [0055.377] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.378] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.378] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.378] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.379] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.379] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.379] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.379] GetProcessHeap () returned 0x3150000 [0055.379] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.379] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1046", cAlternateFileName="")) returned 1 [0055.379] GetProcessHeap () returned 0x3150000 [0055.379] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.380] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.380] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.380] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.380] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.380] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.380] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.380] GetProcessHeap () returned 0x3150000 [0055.380] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.380] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1049", cAlternateFileName="")) returned 1 [0055.380] GetProcessHeap () returned 0x3150000 [0055.380] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.380] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.380] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.381] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.381] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.381] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.381] FindClose (in: hFindFile=0x3162df8 | out: hFindFile=0x3162df8) returned 1 [0055.381] GetProcessHeap () returned 0x3150000 [0055.381] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.381] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1053", cAlternateFileName="")) returned 1 [0055.381] GetProcessHeap () returned 0x3150000 [0055.381] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.382] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.382] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.382] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.382] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.382] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.382] FindClose (in: hFindFile=0x3162e78 | out: hFindFile=0x3162e78) returned 1 [0055.382] GetProcessHeap () returned 0x3150000 [0055.382] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.382] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1055", cAlternateFileName="")) returned 1 [0055.382] GetProcessHeap () returned 0x3150000 [0055.382] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.382] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.383] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.383] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.383] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.383] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.383] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.383] FindClose (in: hFindFile=0x3162e78 | out: hFindFile=0x3162e78) returned 1 [0055.383] GetProcessHeap () returned 0x3150000 [0055.383] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.383] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2052", cAlternateFileName="")) returned 1 [0055.384] GetProcessHeap () returned 0x3150000 [0055.384] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.384] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.384] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.384] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.384] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.384] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.384] FindClose (in: hFindFile=0x3162df8 | out: hFindFile=0x3162df8) returned 1 [0055.384] GetProcessHeap () returned 0x3150000 [0055.384] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.384] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2070", cAlternateFileName="")) returned 1 [0055.384] GetProcessHeap () returned 0x3150000 [0055.384] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.384] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.385] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.385] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.385] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.385] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.385] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.385] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.385] GetProcessHeap () returned 0x3150000 [0055.385] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.385] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3076", cAlternateFileName="")) returned 1 [0055.385] GetProcessHeap () returned 0x3150000 [0055.385] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.385] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.386] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.386] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.386] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.386] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.386] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.386] GetProcessHeap () returned 0x3150000 [0055.386] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.386] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3082", cAlternateFileName="")) returned 1 [0055.386] GetProcessHeap () returned 0x3150000 [0055.386] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.387] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.387] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.387] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.388] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.388] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.388] FindClose (in: hFindFile=0x3162df8 | out: hFindFile=0x3162df8) returned 1 [0055.392] GetProcessHeap () returned 0x3150000 [0055.392] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.392] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Client", cAlternateFileName="")) returned 1 [0055.392] GetProcessHeap () returned 0x3150000 [0055.392] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.393] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.393] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0055.393] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0055.393] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0055.393] FindClose (in: hFindFile=0x3162df8 | out: hFindFile=0x3162df8) returned 1 [0055.393] GetProcessHeap () returned 0x3150000 [0055.393] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.393] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0055.393] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0055.393] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Extended", cAlternateFileName="")) returned 1 [0055.393] GetProcessHeap () returned 0x3150000 [0055.393] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.393] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.394] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.394] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0055.394] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0055.394] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0055.394] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.394] GetProcessHeap () returned 0x3150000 [0055.394] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.394] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Graphics", cAlternateFileName="")) returned 1 [0055.394] GetProcessHeap () returned 0x3150000 [0055.394] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.396] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.396] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0055.396] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0055.396] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0055.396] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0055.397] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0055.397] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0055.397] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0055.397] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0055.397] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0055.397] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0055.397] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0055.397] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0055.397] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0055.398] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0055.398] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0055.398] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0055.398] FindClose (in: hFindFile=0x3162e78 | out: hFindFile=0x3162e78) returned 1 [0055.399] GetProcessHeap () returned 0x3150000 [0055.399] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.399] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0055.399] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0055.399] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0055.399] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0055.399] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0055.399] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0055.399] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0055.400] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0055.400] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0055.400] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0055.400] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0055.400] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0055.400] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0055.400] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0055.401] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0055.401] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0055.401] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0055.401] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0055.401] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0055.401] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0055.401] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0055.402] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0055.402] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0055.402] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0055.402] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0055.402] FindClose (in: hFindFile=0x3163078 | out: hFindFile=0x3163078) returned 1 [0055.402] GetProcessHeap () returned 0x3150000 [0055.402] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ad020 | out: hHeap=0x3150000) returned 1 [0055.403] FindNextFileW (in: hFindFile=0x3162bb8, lpFindFileData=0x536fa18 | out: lpFindFileData=0x536fa18*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3170705, dwReserved1=0x75e90100, cFileName="Boot", cAlternateFileName="")) returned 1 [0055.403] GetProcessHeap () returned 0x3150000 [0055.403] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ad020 [0055.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.404] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0055.405] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD", cAlternateFileName="")) returned 1 [0055.405] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0055.405] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0055.405] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0055.405] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0055.406] GetProcessHeap () returned 0x3150000 [0055.406] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.406] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.406] FindNextFileW (in: hFindFile=0x3162f78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.406] FindNextFileW (in: hFindFile=0x3162f78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.406] FindNextFileW (in: hFindFile=0x3162f78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.406] FindClose (in: hFindFile=0x3162f78 | out: hFindFile=0x3162f78) returned 1 [0055.406] GetProcessHeap () returned 0x3150000 [0055.406] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.407] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0055.407] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0055.407] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0055.407] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0055.407] GetProcessHeap () returned 0x3150000 [0055.407] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.627] GetProcessHeap () returned 0x3150000 [0055.627] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.627] GetProcessHeap () returned 0x3150000 [0055.653] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.653] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.653] GetProcessHeap () returned 0x3150000 [0055.653] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.653] GetProcessHeap () returned 0x3150000 [0055.654] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.654] GetProcessHeap () returned 0x3150000 [0055.654] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.654] GetProcessHeap () returned 0x3150000 [0055.654] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.654] GetProcessHeap () returned 0x3150000 [0055.654] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.654] GetProcessHeap () returned 0x3150000 [0055.654] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.654] GetProcessHeap () returned 0x3150000 [0055.654] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.654] GetProcessHeap () returned 0x3150000 [0055.654] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.654] GetProcessHeap () returned 0x3150000 [0055.654] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.654] GetProcessHeap () returned 0x3150000 [0055.654] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.655] GetProcessHeap () returned 0x3150000 [0055.655] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.655] GetProcessHeap () returned 0x3150000 [0055.655] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.655] GetProcessHeap () returned 0x3150000 [0055.655] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.655] GetProcessHeap () returned 0x3150000 [0055.655] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.655] GetProcessHeap () returned 0x3150000 [0055.655] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.655] GetProcessHeap () returned 0x3150000 [0055.655] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.655] GetProcessHeap () returned 0x3150000 [0055.655] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.655] GetProcessHeap () returned 0x3150000 [0055.655] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.657] GetProcessHeap () returned 0x3150000 [0055.657] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.657] GetProcessHeap () returned 0x3150000 [0055.657] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.657] GetProcessHeap () returned 0x3150000 [0055.657] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.657] GetProcessHeap () returned 0x3150000 [0055.657] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.657] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.657] GetProcessHeap () returned 0x3150000 [0055.657] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.657] GetProcessHeap () returned 0x3150000 [0055.657] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162fb8 [0055.658] GetProcessHeap () returned 0x3150000 [0055.658] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.658] GetProcessHeap () returned 0x3150000 [0055.658] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.658] GetProcessHeap () returned 0x3150000 [0055.658] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.658] GetProcessHeap () returned 0x3150000 [0055.658] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.658] GetProcessHeap () returned 0x3150000 [0055.658] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.658] GetProcessHeap () returned 0x3150000 [0055.658] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162eb8 [0055.658] GetProcessHeap () returned 0x3150000 [0055.658] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.658] GetProcessHeap () returned 0x3150000 [0055.658] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.659] GetProcessHeap () returned 0x3150000 [0055.659] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.659] GetProcessHeap () returned 0x3150000 [0055.659] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.659] GetProcessHeap () returned 0x3150000 [0055.659] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.659] GetProcessHeap () returned 0x3150000 [0055.659] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.659] GetProcessHeap () returned 0x3150000 [0055.659] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.659] GetProcessHeap () returned 0x3150000 [0055.659] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.659] GetProcessHeap () returned 0x3150000 [0055.659] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.659] GetProcessHeap () returned 0x3150000 [0055.659] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.660] GetProcessHeap () returned 0x3150000 [0055.660] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.660] GetProcessHeap () returned 0x3150000 [0055.660] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.660] GetProcessHeap () returned 0x3150000 [0055.660] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.660] GetProcessHeap () returned 0x3150000 [0055.660] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.660] GetProcessHeap () returned 0x3150000 [0055.660] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.660] GetProcessHeap () returned 0x3150000 [0055.660] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.660] GetProcessHeap () returned 0x3150000 [0055.660] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.660] GetProcessHeap () returned 0x3150000 [0055.660] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.661] GetProcessHeap () returned 0x3150000 [0055.661] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.661] GetProcessHeap () returned 0x3150000 [0055.661] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.661] GetProcessHeap () returned 0x3150000 [0055.661] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.661] GetProcessHeap () returned 0x3150000 [0055.661] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.661] GetProcessHeap () returned 0x3150000 [0055.661] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.662] GetProcessHeap () returned 0x3150000 [0055.662] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.662] GetProcessHeap () returned 0x3150000 [0055.662] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.662] GetProcessHeap () returned 0x3150000 [0055.662] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.662] GetProcessHeap () returned 0x3150000 [0055.663] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.663] GetProcessHeap () returned 0x3150000 [0055.663] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.663] GetProcessHeap () returned 0x3150000 [0055.663] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.663] GetProcessHeap () returned 0x3150000 [0055.663] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.663] GetProcessHeap () returned 0x3150000 [0055.663] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.663] GetProcessHeap () returned 0x3150000 [0055.663] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.663] GetProcessHeap () returned 0x3150000 [0055.663] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.663] GetProcessHeap () returned 0x3150000 [0055.663] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.663] GetProcessHeap () returned 0x3150000 [0055.663] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.664] GetProcessHeap () returned 0x3150000 [0055.664] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.664] GetProcessHeap () returned 0x3150000 [0055.664] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.664] GetProcessHeap () returned 0x3150000 [0055.664] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.664] GetProcessHeap () returned 0x3150000 [0055.664] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.664] GetProcessHeap () returned 0x3150000 [0055.664] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.664] GetProcessHeap () returned 0x3150000 [0055.664] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.664] GetProcessHeap () returned 0x3150000 [0055.664] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.664] GetProcessHeap () returned 0x3150000 [0055.664] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.664] GetProcessHeap () returned 0x3150000 [0055.664] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162eb8 [0055.665] GetProcessHeap () returned 0x3150000 [0055.665] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.665] GetProcessHeap () returned 0x3150000 [0055.665] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.665] GetProcessHeap () returned 0x3150000 [0055.665] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.665] GetProcessHeap () returned 0x3150000 [0055.665] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ad020 | out: hHeap=0x3150000) returned 1 [0055.666] GetProcessHeap () returned 0x3150000 [0055.666] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ad020 [0055.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.757] GetProcessHeap () returned 0x3150000 [0055.757] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ad020 | out: hHeap=0x3150000) returned 1 [0055.758] GetProcessHeap () returned 0x3150000 [0055.758] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ad020 [0055.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x31630b8 [0055.769] GetProcessHeap () returned 0x3150000 [0055.769] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ad020 | out: hHeap=0x3150000) returned 1 [0055.769] GetProcessHeap () returned 0x3150000 [0055.769] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ad020 [0055.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.770] GetProcessHeap () returned 0x3150000 [0055.770] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ad020 | out: hHeap=0x3150000) returned 1 [0055.770] GetProcessHeap () returned 0x3150000 [0055.770] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ad020 [0055.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x902952c, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x902952c, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.770] GetProcessHeap () returned 0x3150000 [0055.770] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x538277e, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x538277e, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.771] GetProcessHeap () returned 0x3150000 [0055.771] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.772] GetProcessHeap () returned 0x3150000 [0055.772] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.772] GetProcessHeap () returned 0x3150000 [0055.772] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162eb8 [0055.772] GetProcessHeap () returned 0x3150000 [0055.772] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0055.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.775] GetProcessHeap () returned 0x3150000 [0055.775] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0055.775] GetProcessHeap () returned 0x3150000 [0055.775] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0055.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.776] GetProcessHeap () returned 0x3150000 [0055.776] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.777] GetProcessHeap () returned 0x3150000 [0055.777] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.777] GetProcessHeap () returned 0x3150000 [0055.777] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.777] GetProcessHeap () returned 0x3150000 [0055.777] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.777] GetProcessHeap () returned 0x3150000 [0055.777] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.777] GetProcessHeap () returned 0x3150000 [0055.777] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.777] GetProcessHeap () returned 0x3150000 [0055.778] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.778] GetProcessHeap () returned 0x3150000 [0055.778] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.778] GetProcessHeap () returned 0x3150000 [0055.778] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.779] GetProcessHeap () returned 0x3150000 [0055.779] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.779] GetProcessHeap () returned 0x3150000 [0055.779] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.781] GetProcessHeap () returned 0x3150000 [0055.781] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.781] GetProcessHeap () returned 0x3150000 [0055.781] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.781] GetProcessHeap () returned 0x3150000 [0055.781] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.781] GetProcessHeap () returned 0x3150000 [0055.781] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.783] GetProcessHeap () returned 0x3150000 [0055.783] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.783] GetProcessHeap () returned 0x3150000 [0055.783] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.784] GetProcessHeap () returned 0x3150000 [0055.784] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.784] GetProcessHeap () returned 0x3150000 [0055.784] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.784] GetProcessHeap () returned 0x3150000 [0055.784] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.784] GetProcessHeap () returned 0x3150000 [0055.784] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.785] GetProcessHeap () returned 0x3150000 [0055.785] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.785] GetProcessHeap () returned 0x3150000 [0055.785] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.785] GetProcessHeap () returned 0x3150000 [0055.785] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.785] GetProcessHeap () returned 0x3150000 [0055.785] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.786] GetProcessHeap () returned 0x3150000 [0055.786] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.786] GetProcessHeap () returned 0x3150000 [0055.786] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.786] GetProcessHeap () returned 0x3150000 [0055.786] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0055.786] GetProcessHeap () returned 0x3150000 [0055.786] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0055.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.787] GetProcessHeap () returned 0x3150000 [0055.787] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0055.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffffd82, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.788] GetProcessHeap () returned 0x3150000 [0055.788] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0055.788] GetProcessHeap () returned 0x3150000 [0055.788] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0055.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffffd82, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.789] GetProcessHeap () returned 0x3150000 [0055.789] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0055.789] GetProcessHeap () returned 0x3150000 [0055.789] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0055.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffffd82, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.789] GetProcessHeap () returned 0x3150000 [0055.789] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0055.789] GetProcessHeap () returned 0x3150000 [0055.789] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0055.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffffd82, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.797] GetProcessHeap () returned 0x3150000 [0055.797] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0055.797] GetProcessHeap () returned 0x3150000 [0055.797] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0055.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffffd82, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.797] GetProcessHeap () returned 0x3150000 [0055.797] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0055.797] GetProcessHeap () returned 0x3150000 [0055.797] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0055.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffffd82, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0056.282] GetProcessHeap () returned 0x3150000 [0056.282] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0056.282] GetProcessHeap () returned 0x3150000 [0056.282] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0056.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffffd82, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0056.283] GetProcessHeap () returned 0x3150000 [0056.283] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0056.283] GetProcessHeap () returned 0x3150000 [0056.283] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0056.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffffd82, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0056.283] GetProcessHeap () returned 0x3150000 [0056.283] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0056.283] GetProcessHeap () returned 0x3150000 [0056.283] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0056.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffffd82, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0056.283] GetProcessHeap () returned 0x3150000 [0056.283] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0056.283] GetProcessHeap () returned 0x3150000 [0056.283] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0056.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffffd82, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0056.283] GetProcessHeap () returned 0x3150000 [0056.283] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0056.284] GetProcessHeap () returned 0x3150000 [0056.284] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.284] GetProcessHeap () returned 0x3150000 [0056.284] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0056.285] GetProcessHeap () returned 0x3150000 [0056.285] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.285] GetProcessHeap () returned 0x3150000 [0056.285] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0056.285] GetProcessHeap () returned 0x3150000 [0056.285] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.285] GetProcessHeap () returned 0x3150000 [0056.285] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0056.285] GetProcessHeap () returned 0x3150000 [0056.285] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.285] GetProcessHeap () returned 0x3150000 [0056.285] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0056.286] GetProcessHeap () returned 0x3150000 [0056.286] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.286] GetProcessHeap () returned 0x3150000 [0056.286] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0056.286] GetProcessHeap () returned 0x3150000 [0056.286] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.286] GetProcessHeap () returned 0x3150000 [0056.286] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0056.286] GetProcessHeap () returned 0x3150000 [0056.286] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.286] GetProcessHeap () returned 0x3150000 [0056.286] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0056.287] GetProcessHeap () returned 0x3150000 [0056.287] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.287] GetProcessHeap () returned 0x3150000 [0056.287] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0056.287] GetProcessHeap () returned 0x3150000 [0056.287] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.287] GetProcessHeap () returned 0x3150000 [0056.287] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0056.287] GetProcessHeap () returned 0x3150000 [0056.287] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.287] GetProcessHeap () returned 0x3150000 [0056.287] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0056.287] GetProcessHeap () returned 0x3150000 [0056.287] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.287] GetProcessHeap () returned 0x3150000 [0056.287] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0056.288] GetProcessHeap () returned 0x3150000 [0056.288] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.288] GetProcessHeap () returned 0x3150000 [0056.288] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0056.288] GetProcessHeap () returned 0x3150000 [0056.288] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.288] GetProcessHeap () returned 0x3150000 [0056.288] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0056.288] GetProcessHeap () returned 0x3150000 [0056.288] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.288] GetProcessHeap () returned 0x3150000 [0056.288] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0056.288] GetProcessHeap () returned 0x3150000 [0056.288] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.288] GetProcessHeap () returned 0x3150000 [0056.288] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0056.289] GetProcessHeap () returned 0x3150000 [0056.289] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.289] GetProcessHeap () returned 0x3150000 [0056.289] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0056.289] GetProcessHeap () returned 0x3150000 [0056.289] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.289] GetProcessHeap () returned 0x3150000 [0056.289] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0056.289] GetProcessHeap () returned 0x3150000 [0056.289] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.289] GetProcessHeap () returned 0x3150000 [0056.289] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0056.289] GetProcessHeap () returned 0x3150000 [0056.289] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.289] GetProcessHeap () returned 0x3150000 [0056.289] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0056.290] GetProcessHeap () returned 0x3150000 [0056.290] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.290] GetProcessHeap () returned 0x3150000 [0056.290] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0056.290] GetProcessHeap () returned 0x3150000 [0056.290] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.290] GetProcessHeap () returned 0x3150000 [0056.290] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0056.290] GetProcessHeap () returned 0x3150000 [0056.290] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.290] GetProcessHeap () returned 0x3150000 [0056.290] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0056.290] GetProcessHeap () returned 0x3150000 [0056.290] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.290] GetProcessHeap () returned 0x3150000 [0056.290] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0056.291] GetProcessHeap () returned 0x3150000 [0056.291] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.291] GetProcessHeap () returned 0x3150000 [0056.291] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0056.447] GetProcessHeap () returned 0x3150000 [0056.447] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.447] GetProcessHeap () returned 0x3150000 [0056.447] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0056.463] GetProcessHeap () returned 0x3150000 [0056.463] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.464] GetProcessHeap () returned 0x3150000 [0056.464] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0056.470] GetProcessHeap () returned 0x3150000 [0056.470] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.470] GetProcessHeap () returned 0x3150000 [0056.470] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0056.470] GetProcessHeap () returned 0x3150000 [0056.470] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0056.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0056.471] GetProcessHeap () returned 0x3150000 [0056.471] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0056.488] GetProcessHeap () returned 0x3150000 [0056.488] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.774] GetProcessHeap () returned 0x3150000 [0056.774] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0056.774] GetProcessHeap () returned 0x3150000 [0056.774] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0056.790] GetProcessHeap () returned 0x3150000 [0056.791] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0056.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0057.875] GetProcessHeap () returned 0x3150000 [0057.875] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0057.876] GetProcessHeap () returned 0x3150000 [0057.876] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0057.877] GetProcessHeap () returned 0x3150000 [0057.877] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0057.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0057.880] GetProcessHeap () returned 0x3150000 [0057.880] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0057.880] GetProcessHeap () returned 0x3150000 [0057.880] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0057.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0058.086] GetProcessHeap () returned 0x3150000 [0058.086] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0058.086] GetProcessHeap () returned 0x3150000 [0058.086] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0058.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0058.306] ResetEvent (hEvent=0x284) returned 1 [0058.306] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0058.319] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0058.319] ResetEvent (hEvent=0x284) returned 1 [0058.319] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0058.717] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.htm", cAlternateFileName="")) returned 1 [0058.718] ResetEvent (hEvent=0x284) returned 1 [0058.718] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0058.994] ResetEvent (hEvent=0x284) returned 1 [0058.994] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0059.008] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1 [0059.008] ResetEvent (hEvent=0x284) returned 1 [0059.008] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0059.179] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1 [0059.179] ResetEvent (hEvent=0x284) returned 1 [0059.179] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0059.194] ResetEvent (hEvent=0x284) returned 1 [0059.194] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0059.206] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1 [0059.206] ResetEvent (hEvent=0x284) returned 1 [0059.206] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0059.372] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1 [0059.379] ResetEvent (hEvent=0x284) returned 1 [0059.379] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0059.551] ResetEvent (hEvent=0x284) returned 1 [0059.551] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0059.567] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1 [0059.567] ResetEvent (hEvent=0x284) returned 1 [0059.567] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0059.783] ResetEvent (hEvent=0x284) returned 1 [0059.783] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0059.800] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1 [0059.800] ResetEvent (hEvent=0x284) returned 1 [0059.800] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0059.811] ResetEvent (hEvent=0x284) returned 1 [0059.811] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0060.000] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1 [0060.001] ResetEvent (hEvent=0x284) returned 1 [0060.001] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0060.168] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1 [0060.168] ResetEvent (hEvent=0x284) returned 1 [0060.168] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0060.182] ResetEvent (hEvent=0x284) returned 1 [0060.183] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0060.413] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1 [0060.413] ResetEvent (hEvent=0x284) returned 1 [0060.413] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0060.471] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.htm", cAlternateFileName="")) returned 1 [0060.471] ResetEvent (hEvent=0x284) returned 1 [0060.471] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0060.488] ResetEvent (hEvent=0x284) returned 1 [0060.488] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.171] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1 [0061.171] ResetEvent (hEvent=0x284) returned 1 [0061.171] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.182] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1 [0061.182] ResetEvent (hEvent=0x284) returned 1 [0061.182] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.387] ResetEvent (hEvent=0x284) returned 1 [0061.387] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.397] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1 [0061.398] ResetEvent (hEvent=0x284) returned 1 [0061.398] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.409] ResetEvent (hEvent=0x284) returned 1 [0061.409] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.444] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1 [0061.445] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1 [0061.445] ResetEvent (hEvent=0x284) returned 1 [0061.445] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.647] ResetEvent (hEvent=0x284) returned 1 [0061.647] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.652] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.htm", cAlternateFileName="")) returned 1 [0061.652] ResetEvent (hEvent=0x284) returned 1 [0061.652] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.671] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1 [0061.671] ResetEvent (hEvent=0x284) returned 1 [0061.671] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.867] ResetEvent (hEvent=0x284) returned 1 [0061.867] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.880] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0 [0061.880] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0061.881] GetProcessHeap () returned 0x3150000 [0061.881] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0061.881] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConv", cAlternateFileName="")) returned 1 [0061.881] GetProcessHeap () returned 0x3150000 [0061.881] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0061.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0061.881] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.881] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.881] GetProcessHeap () returned 0x3150000 [0061.881] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0061.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0061.881] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.882] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.882] FindClose (in: hFindFile=0x57d20b8 | out: hFindFile=0x57d20b8) returned 1 [0061.882] GetProcessHeap () returned 0x3150000 [0061.882] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0061.882] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0061.882] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0061.882] GetProcessHeap () returned 0x3150000 [0061.882] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0061.883] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Triedit", cAlternateFileName="")) returned 1 [0061.883] GetProcessHeap () returned 0x3150000 [0061.883] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0061.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0061.884] FindNextFileW (in: hFindFile=0x57d1cb8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.884] FindNextFileW (in: hFindFile=0x57d1cb8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0061.884] GetProcessHeap () returned 0x3150000 [0061.884] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0061.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0061.884] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.885] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0061.885] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0061.885] GetProcessHeap () returned 0x3150000 [0061.885] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0061.885] FindNextFileW (in: hFindFile=0x57d1cb8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0061.885] FindClose (in: hFindFile=0x57d1cb8 | out: hFindFile=0x57d1cb8) returned 1 [0061.885] GetProcessHeap () returned 0x3150000 [0061.885] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0061.886] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC", cAlternateFileName="")) returned 1 [0061.886] GetProcessHeap () returned 0x3150000 [0061.886] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0061.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0061.886] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.886] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1 [0061.886] ResetEvent (hEvent=0x284) returned 1 [0061.886] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.899] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1 [0061.899] ResetEvent (hEvent=0x284) returned 1 [0061.899] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.955] ResetEvent (hEvent=0x284) returned 1 [0061.955] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.972] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0 [0061.972] FindClose (in: hFindFile=0x57d20b8 | out: hFindFile=0x57d20b8) returned 1 [0061.972] GetProcessHeap () returned 0x3150000 [0061.972] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0061.972] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX", cAlternateFileName="")) returned 1 [0061.973] GetProcessHeap () returned 0x3150000 [0061.973] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0061.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0061.973] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.973] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 1 [0061.973] ResetEvent (hEvent=0x284) returned 1 [0061.973] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0061.991] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGX.dll", cAlternateFileName="")) returned 0 [0061.991] FindClose (in: hFindFile=0x57d2178 | out: hFindFile=0x57d2178) returned 1 [0061.991] GetProcessHeap () returned 0x3150000 [0061.991] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0061.991] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 1 [0061.992] GetProcessHeap () returned 0x3150000 [0061.992] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0061.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0061.992] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.992] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0061.992] GetProcessHeap () returned 0x3150000 [0061.992] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0061.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0061.994] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.994] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0061.994] GetProcessHeap () returned 0x3150000 [0061.994] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0061.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0061.995] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.995] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1 [0061.995] ResetEvent (hEvent=0x284) returned 1 [0061.995] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.045] ResetEvent (hEvent=0x284) returned 1 [0062.045] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.057] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0062.057] ResetEvent (hEvent=0x284) returned 1 [0062.057] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.072] ResetEvent (hEvent=0x284) returned 1 [0062.072] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.119] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0 [0062.119] FindClose (in: hFindFile=0x57d22b8 | out: hFindFile=0x57d22b8) returned 1 [0062.119] GetProcessHeap () returned 0x3150000 [0062.120] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0062.120] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1 [0062.120] ResetEvent (hEvent=0x284) returned 1 [0062.120] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.126] ResetEvent (hEvent=0x284) returned 1 [0062.126] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.152] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1 [0062.152] ResetEvent (hEvent=0x284) returned 1 [0062.152] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.199] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1 [0062.199] ResetEvent (hEvent=0x284) returned 1 [0062.199] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.209] ResetEvent (hEvent=0x284) returned 1 [0062.209] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.222] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0 [0062.222] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0062.223] GetProcessHeap () returned 0x3150000 [0062.223] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0062.223] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1 [0062.224] ResetEvent (hEvent=0x284) returned 1 [0062.224] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.521] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1 [0062.522] ResetEvent (hEvent=0x284) returned 1 [0062.522] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.543] ResetEvent (hEvent=0x284) returned 1 [0062.544] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.678] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1 [0062.678] ResetEvent (hEvent=0x284) returned 1 [0062.678] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.689] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0 [0062.689] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0062.689] GetProcessHeap () returned 0x3150000 [0062.689] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0062.689] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTO", cAlternateFileName="")) returned 0 [0062.689] FindClose (in: hFindFile=0x3162eb8 | out: hFindFile=0x3162eb8) returned 1 [0062.689] GetProcessHeap () returned 0x3150000 [0062.690] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0062.691] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0062.691] GetProcessHeap () returned 0x3150000 [0062.691] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0062.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0062.691] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.692] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1 [0062.692] ResetEvent (hEvent=0x284) returned 1 [0062.692] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.859] ResetEvent (hEvent=0x284) returned 1 [0062.859] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.872] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0 [0062.872] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0062.872] GetProcessHeap () returned 0x3150000 [0062.872] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0062.873] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1 [0062.873] GetProcessHeap () returned 0x3150000 [0062.873] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0062.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0062.873] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.873] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ado", cAlternateFileName="")) returned 1 [0062.873] GetProcessHeap () returned 0x3150000 [0062.873] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0062.874] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.874] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0x0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1 [0062.874] ResetEvent (hEvent=0x284) returned 1 [0062.874] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.892] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1 [0062.892] ResetEvent (hEvent=0x284) returned 1 [0062.892] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.905] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0062.905] GetProcessHeap () returned 0x3150000 [0062.905] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0062.905] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0062.906] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.906] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1 [0062.906] ResetEvent (hEvent=0x284) returned 1 [0062.906] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0062.920] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0 [0062.920] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0062.920] GetProcessHeap () returned 0x3150000 [0062.920] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.920] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1 [0062.921] ResetEvent (hEvent=0x284) returned 1 [0062.921] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.134] ResetEvent (hEvent=0x284) returned 1 [0063.134] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.146] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado15.dll", cAlternateFileName="")) returned 1 [0063.146] ResetEvent (hEvent=0x284) returned 1 [0063.147] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.163] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1 [0063.163] ResetEvent (hEvent=0x284) returned 1 [0063.163] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.303] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1 [0063.303] ResetEvent (hEvent=0x284) returned 1 [0063.303] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.316] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1 [0063.316] ResetEvent (hEvent=0x284) returned 1 [0063.316] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.330] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1 [0063.330] ResetEvent (hEvent=0x284) returned 1 [0063.330] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.384] ResetEvent (hEvent=0x284) returned 1 [0063.384] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.404] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1 [0063.404] ResetEvent (hEvent=0x284) returned 1 [0063.404] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.425] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1 [0063.425] ResetEvent (hEvent=0x284) returned 1 [0063.425] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.451] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1 [0063.452] ResetEvent (hEvent=0x284) returned 1 [0063.452] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.541] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1 [0063.541] ResetEvent (hEvent=0x284) returned 1 [0063.541] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.556] ResetEvent (hEvent=0x284) returned 1 [0063.556] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.805] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1 [0063.806] ResetEvent (hEvent=0x284) returned 1 [0063.806] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.822] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador15.dll", cAlternateFileName="")) returned 1 [0063.822] ResetEvent (hEvent=0x284) returned 1 [0063.822] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0063.832] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1 [0063.832] ResetEvent (hEvent=0x284) returned 1 [0063.832] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.245] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox.dll", cAlternateFileName="")) returned 1 [0064.245] ResetEvent (hEvent=0x284) returned 1 [0064.245] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.308] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1 [0064.308] ResetEvent (hEvent=0x284) returned 1 [0064.308] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.331] ResetEvent (hEvent=0x284) returned 1 [0064.332] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.344] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1 [0064.344] ResetEvent (hEvent=0x284) returned 1 [0064.344] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.355] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0 [0064.355] FindClose (in: hFindFile=0x57d1c78 | out: hFindFile=0x57d1c78) returned 1 [0064.355] GetProcessHeap () returned 0x3150000 [0064.355] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0064.355] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1 [0064.355] ResetEvent (hEvent=0x284) returned 1 [0064.355] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.362] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0064.362] GetProcessHeap () returned 0x3150000 [0064.362] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0064.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0064.362] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.362] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1 [0064.362] ResetEvent (hEvent=0x284) returned 1 [0064.362] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.373] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0 [0064.373] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0064.373] GetProcessHeap () returned 0x3150000 [0064.373] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0064.373] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadc", cAlternateFileName="")) returned 1 [0064.373] GetProcessHeap () returned 0x3150000 [0064.373] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0064.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0064.374] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.374] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1 [0064.374] ResetEvent (hEvent=0x284) returned 1 [0064.374] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.385] ResetEvent (hEvent=0x284) returned 1 [0064.385] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.396] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1 [0064.396] ResetEvent (hEvent=0x284) returned 1 [0064.397] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.578] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0064.578] GetProcessHeap () returned 0x3150000 [0064.578] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0064.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0064.671] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.672] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1 [0064.672] ResetEvent (hEvent=0x284) returned 1 [0064.672] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.678] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1 [0064.678] ResetEvent (hEvent=0x284) returned 1 [0064.678] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.688] ResetEvent (hEvent=0x284) returned 1 [0064.689] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.697] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1 [0064.697] ResetEvent (hEvent=0x284) returned 1 [0064.697] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0064.767] ResetEvent (hEvent=0x284) returned 1 [0064.767] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0065.106] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1 [0065.106] ResetEvent (hEvent=0x284) returned 1 [0065.106] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0066.528] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1 [0066.528] ResetEvent (hEvent=0x284) returned 1 [0066.528] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0067.077] ResetEvent (hEvent=0x284) returned 1 [0067.078] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0067.717] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0 [0067.717] FindClose (in: hFindFile=0x57d2178 | out: hFindFile=0x57d2178) returned 1 [0067.718] GetProcessHeap () returned 0x3150000 [0067.718] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.718] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1 [0067.718] ResetEvent (hEvent=0x284) returned 1 [0067.718] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0068.110] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1 [0068.110] ResetEvent (hEvent=0x284) returned 1 [0068.110] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0068.500] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadco.dll", cAlternateFileName="")) returned 1 [0068.500] ResetEvent (hEvent=0x284) returned 1 [0068.501] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0068.545] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1 [0068.545] ResetEvent (hEvent=0x284) returned 1 [0068.545] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0068.638] ResetEvent (hEvent=0x284) returned 1 [0068.638] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0068.674] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadds.dll", cAlternateFileName="")) returned 1 [0068.675] ResetEvent (hEvent=0x284) returned 1 [0068.675] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0068.688] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1 [0068.688] ResetEvent (hEvent=0x284) returned 1 [0068.688] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0069.051] ResetEvent (hEvent=0x284) returned 1 [0069.051] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0069.157] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1 [0069.157] ResetEvent (hEvent=0x284) returned 1 [0069.157] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0069.180] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1 [0069.180] ResetEvent (hEvent=0x284) returned 1 [0069.180] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0069.475] ResetEvent (hEvent=0x284) returned 1 [0069.475] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0069.612] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1 [0069.613] ResetEvent (hEvent=0x284) returned 1 [0069.613] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0069.753] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1 [0069.753] ResetEvent (hEvent=0x284) returned 1 [0069.754] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0069.767] ResetEvent (hEvent=0x284) returned 1 [0069.767] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0069.869] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1 [0069.869] ResetEvent (hEvent=0x284) returned 1 [0069.869] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0069.983] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0 [0069.983] FindClose (in: hFindFile=0x57d23f8 | out: hFindFile=0x57d23f8) returned 1 [0069.983] GetProcessHeap () returned 0x3150000 [0069.983] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0069.983] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1 [0069.983] GetProcessHeap () returned 0x3150000 [0069.983] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0069.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0069.984] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.984] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0069.985] GetProcessHeap () returned 0x3150000 [0069.985] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0069.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.985] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.985] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1 [0069.985] ResetEvent (hEvent=0x284) returned 1 [0069.985] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0070.269] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1 [0070.269] ResetEvent (hEvent=0x284) returned 1 [0070.269] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0071.206] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1 [0071.206] ResetEvent (hEvent=0x284) returned 1 [0071.206] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.027] ResetEvent (hEvent=0x284) returned 1 [0072.028] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.424] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1 [0072.425] ResetEvent (hEvent=0x284) returned 1 [0072.425] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.426] ResetEvent (hEvent=0x284) returned 1 [0072.426] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.426] ResetEvent (hEvent=0x284) returned 1 [0072.426] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.427] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0 [0072.427] FindClose (in: hFindFile=0x57d2178 | out: hFindFile=0x57d2178) returned 1 [0072.428] GetProcessHeap () returned 0x3150000 [0072.428] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0072.428] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1 [0072.428] ResetEvent (hEvent=0x284) returned 1 [0072.428] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.428] ResetEvent (hEvent=0x284) returned 1 [0072.428] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.430] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1 [0072.430] ResetEvent (hEvent=0x284) returned 1 [0072.430] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.433] ResetEvent (hEvent=0x284) returned 1 [0072.433] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.481] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1 [0072.481] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1 [0072.481] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1 [0072.481] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1 [0072.482] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1 [0072.482] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1 [0072.482] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1 [0072.482] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1 [0072.482] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1 [0072.482] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1 [0072.482] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1 [0072.482] ResetEvent (hEvent=0x284) returned 1 [0072.482] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.485] ResetEvent (hEvent=0x284) returned 1 [0072.485] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.501] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1 [0072.501] ResetEvent (hEvent=0x284) returned 1 [0072.501] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.503] ResetEvent (hEvent=0x284) returned 1 [0072.503] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.505] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0 [0072.505] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0072.505] GetProcessHeap () returned 0x3150000 [0072.506] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0072.506] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32.dll", cAlternateFileName="")) returned 1 [0072.506] ResetEvent (hEvent=0x284) returned 1 [0072.506] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.507] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1 [0072.508] ResetEvent (hEvent=0x284) returned 1 [0072.508] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.510] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0 [0072.510] FindClose (in: hFindFile=0x57d20f8 | out: hFindFile=0x57d20f8) returned 1 [0072.510] GetProcessHeap () returned 0x3150000 [0072.510] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.512] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0 [0072.512] FindClose (in: hFindFile=0x3162e78 | out: hFindFile=0x3162e78) returned 1 [0072.512] GetProcessHeap () returned 0x3150000 [0072.512] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0072.512] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0072.512] ResetEvent (hEvent=0x284) returned 1 [0072.512] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.635] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x538277e, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x538277e, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0072.635] GetProcessHeap () returned 0x3150000 [0072.635] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0072.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x538277e, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x538277e, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0072.636] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x538277e, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x538277e, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.636] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0072.636] GetProcessHeap () returned 0x3150000 [0072.636] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0072.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0072.637] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.637] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1 [0072.637] ResetEvent (hEvent=0x284) returned 1 [0072.637] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.640] ResetEvent (hEvent=0x284) returned 1 [0072.640] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.641] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1 [0072.642] ResetEvent (hEvent=0x284) returned 1 [0072.642] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.643] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1 [0072.643] ResetEvent (hEvent=0x284) returned 1 [0072.643] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.646] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0 [0072.646] FindClose (in: hFindFile=0x57d1c78 | out: hFindFile=0x57d1c78) returned 1 [0072.646] GetProcessHeap () returned 0x3150000 [0072.646] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0072.646] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1 [0072.646] ResetEvent (hEvent=0x284) returned 1 [0072.646] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.648] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1 [0072.648] ResetEvent (hEvent=0x284) returned 1 [0072.648] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.685] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1 [0072.685] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1 [0072.686] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1 [0072.686] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1 [0072.686] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x0, dwReserved1=0x0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1 [0072.686] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0072.686] GetProcessHeap () returned 0x3150000 [0072.686] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0072.686] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0072.686] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.686] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 1 [0072.686] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="bing.ico", cAlternateFileName="")) returned 0 [0072.686] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0072.686] GetProcessHeap () returned 0x3150000 [0072.686] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0072.687] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0cbc570, ftCreationTime.dwHighDateTime=0x1d555b8, ftLastAccessTime.dwLowDateTime=0xc8924af0, ftLastAccessTime.dwHighDateTime=0x1d511ae, ftLastWriteTime.dwLowDateTime=0xc8924af0, ftLastWriteTime.dwHighDateTime=0x1d511ae, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="powers_mixture_bidding.exe", cAlternateFileName="POWERS~1.EXE")) returned 1 [0072.687] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1 [0072.687] GetProcessHeap () returned 0x3150000 [0072.687] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0072.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0072.687] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.687] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 1 [0072.687] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="install.ins", cAlternateFileName="")) returned 0 [0072.687] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0072.687] GetProcessHeap () returned 0x3150000 [0072.687] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0072.687] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0072.687] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0072.687] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0072.687] GetProcessHeap () returned 0x3150000 [0072.687] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0072.689] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x536f788 | out: lpFindFileData=0x536f788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x64590e0, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x64590e0, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Java", cAlternateFileName="")) returned 1 [0072.689] GetProcessHeap () returned 0x3150000 [0072.689] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0072.689] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x64590e0, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x64590e0, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0072.689] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x64590e0, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x64590e0, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.689] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ca7a80, ftCreationTime.dwHighDateTime=0x1d55adc, ftLastAccessTime.dwLowDateTime=0xdb0b9000, ftLastAccessTime.dwHighDateTime=0x1d54625, ftLastWriteTime.dwLowDateTime=0xdb0b9000, ftLastWriteTime.dwHighDateTime=0x1d54625, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="coming.exe", cAlternateFileName="")) returned 1 [0072.689] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x536f4f8 | out: lpFindFileData=0x536f4f8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0072.689] GetProcessHeap () returned 0x3150000 [0072.689] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0072.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0072.690] FindNextFileW (in: hFindFile=0x57d1ff8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.690] FindNextFileW (in: hFindFile=0x57d1ff8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0072.690] GetProcessHeap () returned 0x3150000 [0072.690] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0072.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0072.691] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.691] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0072.691] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0072.691] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0072.691] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0072.692] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0072.692] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0072.692] GetProcessHeap () returned 0x3150000 [0072.692] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0072.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0072.692] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.692] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0072.692] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0072.693] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0072.693] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0072.693] GetProcessHeap () returned 0x3150000 [0072.693] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0072.693] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0072.693] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0072.693] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0072.693] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0072.693] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0072.693] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0072.693] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0072.694] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0072.694] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0072.694] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0072.694] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0072.694] ResetEvent (hEvent=0x284) returned 1 [0072.694] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.696] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0072.696] ResetEvent (hEvent=0x284) returned 1 [0072.696] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.860] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0072.860] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0072.861] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0072.861] ResetEvent (hEvent=0x284) returned 1 [0072.861] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.866] ResetEvent (hEvent=0x284) returned 1 [0072.866] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0072.893] ResetEvent (hEvent=0x284) returned 1 [0072.893] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0073.280] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0073.280] ResetEvent (hEvent=0x284) returned 1 [0073.280] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0073.392] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0073.392] ResetEvent (hEvent=0x284) returned 1 [0073.392] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0073.430] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0073.430] ResetEvent (hEvent=0x284) returned 1 [0073.430] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0073.564] ResetEvent (hEvent=0x284) returned 1 [0073.564] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0073.589] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0073.590] ResetEvent (hEvent=0x284) returned 1 [0073.590] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0073.604] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0073.604] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0073.604] ResetEvent (hEvent=0x284) returned 1 [0073.604] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0073.620] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0073.620] ResetEvent (hEvent=0x284) returned 1 [0073.620] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0073.892] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0073.892] ResetEvent (hEvent=0x284) returned 1 [0073.892] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.150] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0074.150] ResetEvent (hEvent=0x284) returned 1 [0074.150] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.171] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0074.171] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0074.171] ResetEvent (hEvent=0x284) returned 1 [0074.171] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.194] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0074.194] ResetEvent (hEvent=0x284) returned 1 [0074.195] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.211] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0074.211] ResetEvent (hEvent=0x284) returned 1 [0074.211] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.226] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0074.226] ResetEvent (hEvent=0x284) returned 1 [0074.226] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.240] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0074.240] ResetEvent (hEvent=0x284) returned 1 [0074.240] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.486] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0074.486] ResetEvent (hEvent=0x284) returned 1 [0074.486] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.499] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0074.499] ResetEvent (hEvent=0x284) returned 1 [0074.499] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.791] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0074.791] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0074.791] ResetEvent (hEvent=0x284) returned 1 [0074.791] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.878] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0074.882] ResetEvent (hEvent=0x284) returned 1 [0074.882] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.909] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0074.909] ResetEvent (hEvent=0x284) returned 1 [0074.909] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.936] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0074.936] ResetEvent (hEvent=0x284) returned 1 [0074.936] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.947] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0074.947] ResetEvent (hEvent=0x284) returned 1 [0074.947] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.967] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0074.967] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0074.967] ResetEvent (hEvent=0x284) returned 1 [0074.967] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0074.987] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0074.987] ResetEvent (hEvent=0x284) returned 1 [0074.987] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0075.480] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0075.480] ResetEvent (hEvent=0x284) returned 1 [0075.480] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0075.715] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0075.716] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0075.716] ResetEvent (hEvent=0x284) returned 1 [0075.716] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0075.891] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0075.891] ResetEvent (hEvent=0x284) returned 1 [0075.891] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0075.922] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0075.922] ResetEvent (hEvent=0x284) returned 1 [0075.922] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0075.948] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0075.948] ResetEvent (hEvent=0x284) returned 1 [0075.948] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0075.963] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0075.963] ResetEvent (hEvent=0x284) returned 1 [0075.963] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0075.979] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0075.979] ResetEvent (hEvent=0x284) returned 1 [0075.980] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.038] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0076.038] ResetEvent (hEvent=0x284) returned 1 [0076.038] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.063] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0076.063] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0076.063] ResetEvent (hEvent=0x284) returned 1 [0076.063] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.076] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0076.076] ResetEvent (hEvent=0x284) returned 1 [0076.076] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.092] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0076.092] ResetEvent (hEvent=0x284) returned 1 [0076.092] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.105] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0076.105] ResetEvent (hEvent=0x284) returned 1 [0076.105] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.128] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0076.131] ResetEvent (hEvent=0x284) returned 1 [0076.131] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.151] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0076.152] ResetEvent (hEvent=0x284) returned 1 [0076.152] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.300] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0076.300] ResetEvent (hEvent=0x284) returned 1 [0076.301] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.310] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0076.310] GetProcessHeap () returned 0x3150000 [0076.310] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0076.311] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.311] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0076.311] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0076.311] ResetEvent (hEvent=0x284) returned 1 [0076.311] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.322] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0076.323] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0076.323] GetProcessHeap () returned 0x3150000 [0076.323] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0076.323] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0076.323] ResetEvent (hEvent=0x284) returned 1 [0076.323] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.337] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0076.337] ResetEvent (hEvent=0x284) returned 1 [0076.337] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.348] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0076.348] ResetEvent (hEvent=0x284) returned 1 [0076.348] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.522] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0076.522] ResetEvent (hEvent=0x284) returned 1 [0076.522] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.539] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0076.539] ResetEvent (hEvent=0x284) returned 1 [0076.539] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.549] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0076.554] ResetEvent (hEvent=0x284) returned 1 [0076.554] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.569] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0076.569] ResetEvent (hEvent=0x284) returned 1 [0076.569] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.583] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0076.583] GetProcessHeap () returned 0x3150000 [0076.583] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0076.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0076.583] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.583] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0076.583] ResetEvent (hEvent=0x284) returned 1 [0076.584] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.604] ResetEvent (hEvent=0x284) returned 1 [0076.604] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.637] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0076.637] ResetEvent (hEvent=0x284) returned 1 [0076.637] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0076.881] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0076.881] ResetEvent (hEvent=0x284) returned 1 [0076.881] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0077.125] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0077.126] FindClose (in: hFindFile=0x57d1e38 | out: hFindFile=0x57d1e38) returned 1 [0077.126] GetProcessHeap () returned 0x3150000 [0077.126] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.126] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0077.126] ResetEvent (hEvent=0x284) returned 1 [0077.126] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0077.476] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0077.476] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0077.476] ResetEvent (hEvent=0x284) returned 1 [0077.476] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0077.499] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0077.499] ResetEvent (hEvent=0x284) returned 1 [0077.499] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0077.531] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0077.531] ResetEvent (hEvent=0x284) returned 1 [0077.531] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0077.551] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0077.552] ResetEvent (hEvent=0x284) returned 1 [0077.552] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0077.681] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0077.681] ResetEvent (hEvent=0x284) returned 1 [0077.681] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0077.701] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0077.701] ResetEvent (hEvent=0x284) returned 1 [0077.701] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0077.718] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0077.718] ResetEvent (hEvent=0x284) returned 1 [0077.718] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0077.803] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0077.803] ResetEvent (hEvent=0x284) returned 1 [0077.803] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0077.817] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0077.818] ResetEvent (hEvent=0x284) returned 1 [0077.818] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0077.983] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0077.984] ResetEvent (hEvent=0x284) returned 1 [0077.984] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0077.998] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0077.998] ResetEvent (hEvent=0x284) returned 1 [0077.998] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.011] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0078.011] ResetEvent (hEvent=0x284) returned 1 [0078.011] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.026] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0078.026] ResetEvent (hEvent=0x284) returned 1 [0078.026] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.096] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0078.096] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0078.096] GetProcessHeap () returned 0x3150000 [0078.096] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.096] FindNextFileW (in: hFindFile=0x57d1ff8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0078.096] ResetEvent (hEvent=0x284) returned 1 [0078.096] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.164] FindNextFileW (in: hFindFile=0x57d1ff8, lpFindFileData=0x536f268 | out: lpFindFileData=0x536f268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0078.164] GetProcessHeap () returned 0x3150000 [0078.164] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0078.164] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.164] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0078.164] ResetEvent (hEvent=0x284) returned 1 [0078.164] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.189] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0078.189] GetProcessHeap () returned 0x3150000 [0078.189] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0078.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.190] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.190] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0078.190] ResetEvent (hEvent=0x284) returned 1 [0078.190] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.223] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0078.223] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0078.223] GetProcessHeap () returned 0x3150000 [0078.223] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0078.223] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0078.223] GetProcessHeap () returned 0x3150000 [0078.223] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0078.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.223] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.223] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.224] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0078.224] GetProcessHeap () returned 0x3150000 [0078.224] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0078.224] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0078.224] ResetEvent (hEvent=0x284) returned 1 [0078.224] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.239] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0078.239] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0078.239] ResetEvent (hEvent=0x284) returned 1 [0078.239] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.268] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0078.268] GetProcessHeap () returned 0x3150000 [0078.268] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.269] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.269] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0078.269] ResetEvent (hEvent=0x284) returned 1 [0078.269] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.330] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0078.330] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0078.331] ResetEvent (hEvent=0x284) returned 1 [0078.331] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.362] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0078.362] ResetEvent (hEvent=0x284) returned 1 [0078.364] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.377] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0078.377] ResetEvent (hEvent=0x284) returned 1 [0078.377] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.390] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0078.390] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0078.390] GetProcessHeap () returned 0x3150000 [0078.390] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.390] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0078.390] ResetEvent (hEvent=0x284) returned 1 [0078.391] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.401] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0078.401] ResetEvent (hEvent=0x284) returned 1 [0078.401] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.412] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0078.413] GetProcessHeap () returned 0x3150000 [0078.413] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.414] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.414] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0078.414] ResetEvent (hEvent=0x284) returned 1 [0078.414] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.426] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0078.427] ResetEvent (hEvent=0x284) returned 1 [0078.427] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.437] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0078.438] ResetEvent (hEvent=0x284) returned 1 [0078.438] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.486] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0078.486] ResetEvent (hEvent=0x284) returned 1 [0078.486] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.499] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0078.500] ResetEvent (hEvent=0x284) returned 1 [0078.500] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.578] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0078.578] ResetEvent (hEvent=0x284) returned 1 [0078.578] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.906] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0078.906] ResetEvent (hEvent=0x284) returned 1 [0078.906] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.927] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0078.928] ResetEvent (hEvent=0x284) returned 1 [0078.928] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0078.985] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0078.985] ResetEvent (hEvent=0x284) returned 1 [0078.985] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0079.233] ResetEvent (hEvent=0x284) returned 1 [0079.233] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0079.524] ResetEvent (hEvent=0x284) returned 1 [0079.524] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0079.536] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0079.537] ResetEvent (hEvent=0x284) returned 1 [0079.537] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0079.729] ResetEvent (hEvent=0x284) returned 1 [0079.729] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0079.742] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0079.742] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0079.742] ResetEvent (hEvent=0x284) returned 1 [0079.742] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0079.882] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0079.883] ResetEvent (hEvent=0x284) returned 1 [0079.883] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.132] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0080.132] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0080.132] ResetEvent (hEvent=0x284) returned 1 [0080.132] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.149] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0080.149] ResetEvent (hEvent=0x284) returned 1 [0080.149] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.156] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0080.157] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0 [0080.157] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0080.157] GetProcessHeap () returned 0x3150000 [0080.157] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.157] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0080.158] ResetEvent (hEvent=0x284) returned 1 [0080.158] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.168] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0080.168] GetProcessHeap () returned 0x3150000 [0080.168] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.169] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.169] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0080.169] ResetEvent (hEvent=0x284) returned 1 [0080.169] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.231] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1 [0080.231] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0080.231] ResetEvent (hEvent=0x284) returned 1 [0080.231] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.284] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0080.284] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0080.285] ResetEvent (hEvent=0x284) returned 1 [0080.285] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.296] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0080.296] ResetEvent (hEvent=0x284) returned 1 [0080.297] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.310] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0080.310] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0080.310] ResetEvent (hEvent=0x284) returned 1 [0080.310] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.321] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0080.321] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0080.321] ResetEvent (hEvent=0x284) returned 1 [0080.321] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.382] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0080.382] ResetEvent (hEvent=0x284) returned 1 [0080.382] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.391] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0080.391] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0080.391] ResetEvent (hEvent=0x284) returned 1 [0080.391] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.443] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0080.443] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0080.444] GetProcessHeap () returned 0x3150000 [0080.444] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.444] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0080.444] ResetEvent (hEvent=0x284) returned 1 [0080.444] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.452] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0080.453] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0080.453] ResetEvent (hEvent=0x284) returned 1 [0080.453] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.532] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0080.532] GetProcessHeap () returned 0x3150000 [0080.532] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.533] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.533] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0080.533] ResetEvent (hEvent=0x284) returned 1 [0080.533] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.891] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0080.892] ResetEvent (hEvent=0x284) returned 1 [0080.892] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0080.996] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0080.996] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0080.996] ResetEvent (hEvent=0x284) returned 1 [0080.996] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0081.087] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0081.087] ResetEvent (hEvent=0x284) returned 1 [0081.087] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0081.120] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0081.120] ResetEvent (hEvent=0x284) returned 1 [0081.120] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0081.287] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0081.288] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0081.288] ResetEvent (hEvent=0x284) returned 1 [0081.288] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0081.394] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0081.394] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0081.395] GetProcessHeap () returned 0x3150000 [0081.395] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0081.396] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0081.396] ResetEvent (hEvent=0x284) returned 1 [0081.396] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0081.446] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x536efd8 | out: lpFindFileData=0x536efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0081.446] GetProcessHeap () returned 0x3150000 [0081.446] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0081.446] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0081.446] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.446] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x536ed48 | out: lpFindFileData=0x536ed48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0081.447] GetProcessHeap () returned 0x3150000 [0081.447] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0081.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0081.448] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.448] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0081.448] ResetEvent (hEvent=0x284) returned 1 [0081.448] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0081.481] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0081.481] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0081.482] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0081.482] ResetEvent (hEvent=0x284) returned 1 [0081.482] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) returned 0x0 [0081.583] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0081.583] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0081.583] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0081.583] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x536eab8 | out: lpFindFileData=0x536eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0081.583] ResetEvent (hEvent=0x284) returned 1 [0081.583] WaitForSingleObject (hHandle=0x284, dwMilliseconds=0xffffffff) Thread: id = 18 os_tid = 0xdf8 [0055.029] GetProcessHeap () returned 0x3150000 [0055.029] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x38) returned 0x3162f38 [0055.029] GetProcessHeap () returned 0x3150000 [0055.029] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x18) returned 0x3160e88 [0055.030] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x29c [0055.030] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a0 [0055.030] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x2a4 [0055.030] GetProcessHeap () returned 0x3150000 [0055.030] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31bd908 [0055.030] GetProcessHeap () returned 0x3150000 [0055.030] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x50) returned 0x31706f8 [0055.030] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0055.030] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0055.030] Wow64DisableWow64FsRedirection (in: OldValue=0x53efae4 | out: OldValue=0x53efae4*=0x0) returned 1 [0055.030] GetProcessHeap () returned 0x3150000 [0055.030] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31706f8 | out: hHeap=0x3150000) returned 1 [0055.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x4048ba, lpParameter=0x53efae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a8 [0055.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1, lpStartAddress=0x4048ba, lpParameter=0x53efae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac [0055.031] GetProcessHeap () returned 0x3150000 [0055.031] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31cd910 [0055.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\*", lpFindFileData=0x53ef858 | out: lpFindFileData=0x53ef858*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3170705, dwReserved1=0x75e90100, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x3162c38 [0055.034] GetProcessHeap () returned 0x3150000 [0055.034] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ee928 [0055.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\*", lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3162fb8 [0055.036] FindNextFileW (in: hFindFile=0x3162fb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0055.036] FindNextFileW (in: hFindFile=0x3162fb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Logs", cAlternateFileName="")) returned 1 [0055.036] GetProcessHeap () returned 0x3150000 [0055.036] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ff938 [0055.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.037] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0055.037] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.038] GetProcessHeap () returned 0x3150000 [0055.038] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ff938 | out: hHeap=0x3150000) returned 1 [0055.038] FindNextFileW (in: hFindFile=0x3162fb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0055.038] GetProcessHeap () returned 0x3150000 [0055.039] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ff938 [0055.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.043] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0055.044] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.044] GetProcessHeap () returned 0x3150000 [0055.044] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ff938 | out: hHeap=0x3150000) returned 1 [0055.045] FindNextFileW (in: hFindFile=0x3162fb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0055.045] FindClose (in: hFindFile=0x3162fb8 | out: hFindFile=0x3162fb8) returned 1 [0055.045] GetProcessHeap () returned 0x3150000 [0055.045] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ee928 | out: hHeap=0x3150000) returned 1 [0055.046] FindNextFileW (in: hFindFile=0x3162c38, lpFindFileData=0x53ef858 | out: lpFindFileData=0x53ef858*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3170705, dwReserved1=0x75e90100, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0055.046] GetProcessHeap () returned 0x3150000 [0055.046] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ee928 [0055.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\*", lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.047] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0055.047] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0055.047] GetProcessHeap () returned 0x3150000 [0055.047] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162d38 [0055.047] FindNextFileW (in: hFindFile=0x3162d38, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.047] FindNextFileW (in: hFindFile=0x3162d38, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0055.047] FindNextFileW (in: hFindFile=0x3162d38, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0055.048] FindClose (in: hFindFile=0x3162d38 | out: hFindFile=0x3162d38) returned 1 [0055.048] GetProcessHeap () returned 0x3150000 [0055.048] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.048] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0055.048] GetProcessHeap () returned 0x3150000 [0055.048] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31629b8 [0055.049] FindNextFileW (in: hFindFile=0x31629b8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.049] FindNextFileW (in: hFindFile=0x31629b8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0055.049] FindNextFileW (in: hFindFile=0x31629b8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0055.049] FindClose (in: hFindFile=0x31629b8 | out: hFindFile=0x31629b8) returned 1 [0055.049] GetProcessHeap () returned 0x3150000 [0055.049] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.049] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0055.049] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.050] GetProcessHeap () returned 0x3150000 [0055.050] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ee928 | out: hHeap=0x3150000) returned 1 [0055.050] FindNextFileW (in: hFindFile=0x3162c38, lpFindFileData=0x53ef858 | out: lpFindFileData=0x53ef858*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3170705, dwReserved1=0x75e90100, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0055.051] FindNextFileW (in: hFindFile=0x3162c38, lpFindFileData=0x53ef858 | out: lpFindFileData=0x53ef858*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3170705, dwReserved1=0x75e90100, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0055.051] GetProcessHeap () returned 0x3150000 [0055.051] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ee928 [0055.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\*", lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x31630b8 [0055.062] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0055.067] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1025", cAlternateFileName="")) returned 1 [0055.067] GetProcessHeap () returned 0x3150000 [0055.067] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.068] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.068] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.068] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.068] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.068] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.070] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.070] GetProcessHeap () returned 0x3150000 [0055.070] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.070] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1028", cAlternateFileName="")) returned 1 [0055.070] GetProcessHeap () returned 0x3150000 [0055.070] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.072] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.072] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.072] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.072] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.072] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.073] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.074] GetProcessHeap () returned 0x3150000 [0055.074] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.074] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1029", cAlternateFileName="")) returned 1 [0055.074] GetProcessHeap () returned 0x3150000 [0055.074] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.075] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.076] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.076] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.076] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.076] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.077] FindClose (in: hFindFile=0x3162e78 | out: hFindFile=0x3162e78) returned 1 [0055.077] GetProcessHeap () returned 0x3150000 [0055.077] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.078] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1030", cAlternateFileName="")) returned 1 [0055.078] GetProcessHeap () returned 0x3150000 [0055.078] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162c78 [0055.079] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.079] FindNextFileW (in: hFindFile=0x3162c78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.081] FindClose (in: hFindFile=0x3162c78 | out: hFindFile=0x3162c78) returned 1 [0055.081] GetProcessHeap () returned 0x3150000 [0055.081] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.081] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1031", cAlternateFileName="")) returned 1 [0055.081] GetProcessHeap () returned 0x3150000 [0055.081] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162d38 [0055.083] FindNextFileW (in: hFindFile=0x3162d38, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x3162d38, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x3162d38, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x3162d38, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x3162d38, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.084] FindClose (in: hFindFile=0x3162d38 | out: hFindFile=0x3162d38) returned 1 [0055.085] GetProcessHeap () returned 0x3150000 [0055.085] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.085] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1032", cAlternateFileName="")) returned 1 [0055.085] GetProcessHeap () returned 0x3150000 [0055.085] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.086] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.086] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.087] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.087] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.087] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.088] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.088] GetProcessHeap () returned 0x3150000 [0055.088] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.089] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1033", cAlternateFileName="")) returned 1 [0055.089] GetProcessHeap () returned 0x3150000 [0055.089] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.089] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162eb8 [0055.090] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.090] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.090] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.091] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.091] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.096] FindClose (in: hFindFile=0x3162eb8 | out: hFindFile=0x3162eb8) returned 1 [0055.096] GetProcessHeap () returned 0x3150000 [0055.096] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.097] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1035", cAlternateFileName="")) returned 1 [0055.097] GetProcessHeap () returned 0x3150000 [0055.097] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.100] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.407] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.407] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.408] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.408] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.408] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.408] GetProcessHeap () returned 0x3150000 [0055.408] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.408] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1036", cAlternateFileName="")) returned 1 [0055.408] GetProcessHeap () returned 0x3150000 [0055.408] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.408] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.408] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.408] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.408] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.408] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.408] FindClose (in: hFindFile=0x3163078 | out: hFindFile=0x3163078) returned 1 [0055.408] GetProcessHeap () returned 0x3150000 [0055.408] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.408] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1037", cAlternateFileName="")) returned 1 [0055.409] GetProcessHeap () returned 0x3150000 [0055.409] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.409] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.409] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.409] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.409] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.409] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.409] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.409] GetProcessHeap () returned 0x3150000 [0055.409] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.409] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1038", cAlternateFileName="")) returned 1 [0055.409] GetProcessHeap () returned 0x3150000 [0055.409] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.409] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.409] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.410] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.410] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.410] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.410] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.410] GetProcessHeap () returned 0x3150000 [0055.410] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.410] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1040", cAlternateFileName="")) returned 1 [0055.410] GetProcessHeap () returned 0x3150000 [0055.410] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.410] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.410] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.410] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.410] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.410] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.410] FindClose (in: hFindFile=0x3162df8 | out: hFindFile=0x3162df8) returned 1 [0055.410] GetProcessHeap () returned 0x3150000 [0055.410] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.410] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1041", cAlternateFileName="")) returned 1 [0055.411] GetProcessHeap () returned 0x3150000 [0055.411] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.411] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.411] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.411] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.411] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.411] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.411] FindClose (in: hFindFile=0x3162e78 | out: hFindFile=0x3162e78) returned 1 [0055.411] GetProcessHeap () returned 0x3150000 [0055.411] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.411] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1042", cAlternateFileName="")) returned 1 [0055.411] GetProcessHeap () returned 0x3150000 [0055.411] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.411] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.411] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.412] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.412] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.412] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.412] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.412] GetProcessHeap () returned 0x3150000 [0055.412] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.412] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1043", cAlternateFileName="")) returned 1 [0055.412] GetProcessHeap () returned 0x3150000 [0055.412] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.412] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.412] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.412] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.412] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.412] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.412] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.412] GetProcessHeap () returned 0x3150000 [0055.412] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.412] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1044", cAlternateFileName="")) returned 1 [0055.413] GetProcessHeap () returned 0x3150000 [0055.413] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.413] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.413] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.413] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.413] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.413] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.413] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.413] GetProcessHeap () returned 0x3150000 [0055.413] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.413] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1045", cAlternateFileName="")) returned 1 [0055.413] GetProcessHeap () returned 0x3150000 [0055.413] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.413] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.413] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.413] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.414] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.414] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.414] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.414] GetProcessHeap () returned 0x3150000 [0055.414] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.414] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1046", cAlternateFileName="")) returned 1 [0055.414] GetProcessHeap () returned 0x3150000 [0055.414] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.414] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.414] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.414] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.414] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.414] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.414] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.414] GetProcessHeap () returned 0x3150000 [0055.414] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.414] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1049", cAlternateFileName="")) returned 1 [0055.415] GetProcessHeap () returned 0x3150000 [0055.415] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.415] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.415] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.415] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.415] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.415] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.415] FindClose (in: hFindFile=0x3162df8 | out: hFindFile=0x3162df8) returned 1 [0055.415] GetProcessHeap () returned 0x3150000 [0055.415] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.415] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1053", cAlternateFileName="")) returned 1 [0055.415] GetProcessHeap () returned 0x3150000 [0055.415] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.415] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.415] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.415] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.416] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.416] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.416] FindClose (in: hFindFile=0x3162e78 | out: hFindFile=0x3162e78) returned 1 [0055.416] GetProcessHeap () returned 0x3150000 [0055.416] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.416] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="1055", cAlternateFileName="")) returned 1 [0055.416] GetProcessHeap () returned 0x3150000 [0055.416] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162eb8 [0055.416] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.416] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.416] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.416] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.416] FindNextFileW (in: hFindFile=0x3162eb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.416] FindClose (in: hFindFile=0x3162eb8 | out: hFindFile=0x3162eb8) returned 1 [0055.416] GetProcessHeap () returned 0x3150000 [0055.416] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.416] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2052", cAlternateFileName="")) returned 1 [0055.416] GetProcessHeap () returned 0x3150000 [0055.417] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.417] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.417] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.417] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.417] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.417] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.417] FindClose (in: hFindFile=0x3162df8 | out: hFindFile=0x3162df8) returned 1 [0055.417] GetProcessHeap () returned 0x3150000 [0055.417] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.417] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="2070", cAlternateFileName="")) returned 1 [0055.417] GetProcessHeap () returned 0x3150000 [0055.417] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.417] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.417] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.417] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.418] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.418] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.418] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.418] GetProcessHeap () returned 0x3150000 [0055.418] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.418] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3076", cAlternateFileName="")) returned 1 [0055.418] GetProcessHeap () returned 0x3150000 [0055.418] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.418] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.418] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.418] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.418] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.418] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.418] FindClose (in: hFindFile=0x3162cb8 | out: hFindFile=0x3162cb8) returned 1 [0055.429] GetProcessHeap () returned 0x3150000 [0055.429] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.429] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="3082", cAlternateFileName="")) returned 1 [0055.430] GetProcessHeap () returned 0x3150000 [0055.430] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.430] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0055.430] FindClose (in: hFindFile=0x3162df8 | out: hFindFile=0x3162df8) returned 1 [0055.430] GetProcessHeap () returned 0x3150000 [0055.430] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Client", cAlternateFileName="")) returned 1 [0055.430] GetProcessHeap () returned 0x3150000 [0055.430] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.430] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x3162df8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0055.431] FindClose (in: hFindFile=0x3162df8 | out: hFindFile=0x3162df8) returned 1 [0055.431] GetProcessHeap () returned 0x3150000 [0055.431] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Extended", cAlternateFileName="")) returned 1 [0055.431] GetProcessHeap () returned 0x3150000 [0055.431] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.431] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x3163078, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0055.431] FindClose (in: hFindFile=0x3163078 | out: hFindFile=0x3163078) returned 1 [0055.431] GetProcessHeap () returned 0x3150000 [0055.432] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.432] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Graphics", cAlternateFileName="")) returned 1 [0055.432] GetProcessHeap () returned 0x3150000 [0055.432] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0055.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.432] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.432] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0055.434] FindNextFileW (in: hFindFile=0x3162e78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0055.434] FindClose (in: hFindFile=0x3162e78 | out: hFindFile=0x3162e78) returned 1 [0055.435] GetProcessHeap () returned 0x3150000 [0055.435] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x31630b8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0055.436] FindClose (in: hFindFile=0x31630b8 | out: hFindFile=0x31630b8) returned 1 [0055.437] GetProcessHeap () returned 0x3150000 [0055.437] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ee928 | out: hHeap=0x3150000) returned 1 [0055.437] FindNextFileW (in: hFindFile=0x3162c38, lpFindFileData=0x53ef858 | out: lpFindFileData=0x53ef858*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3170705, dwReserved1=0x75e90100, cFileName="Boot", cAlternateFileName="")) returned 1 [0055.437] GetProcessHeap () returned 0x3150000 [0055.437] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0055.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\*", lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3162cb8 [0055.615] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="..", cAlternateFileName="")) returned 1 [0055.615] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD", cAlternateFileName="")) returned 1 [0055.615] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0055.615] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0055.615] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0055.615] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0055.615] GetProcessHeap () returned 0x3150000 [0055.615] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\bg-BG\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.615] FindNextFileW (in: hFindFile=0x3162f78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0055.616] FindNextFileW (in: hFindFile=0x3162f78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0055.616] FindNextFileW (in: hFindFile=0x3162f78, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0055.616] FindClose (in: hFindFile=0x3162f78 | out: hFindFile=0x3162f78) returned 1 [0055.616] GetProcessHeap () returned 0x3150000 [0055.616] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.616] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0055.616] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0055.616] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0055.616] FindNextFileW (in: hFindFile=0x3162cb8, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0055.616] GetProcessHeap () returned 0x3150000 [0055.616] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.616] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.618] GetProcessHeap () returned 0x3150000 [0055.618] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.618] GetProcessHeap () returned 0x3150000 [0055.618] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.618] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\da-DK\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162eb8 [0055.620] GetProcessHeap () returned 0x3150000 [0055.620] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.620] GetProcessHeap () returned 0x3150000 [0055.620] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.620] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\de-DE\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.621] GetProcessHeap () returned 0x3150000 [0055.621] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.621] GetProcessHeap () returned 0x3150000 [0055.621] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\el-GR\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.621] GetProcessHeap () returned 0x3150000 [0055.621] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.621] GetProcessHeap () returned 0x3150000 [0055.621] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.622] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-GB\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.622] GetProcessHeap () returned 0x3150000 [0055.622] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.623] GetProcessHeap () returned 0x3150000 [0055.623] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\en-US\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.623] GetProcessHeap () returned 0x3150000 [0055.623] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.623] GetProcessHeap () returned 0x3150000 [0055.623] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-ES\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.623] GetProcessHeap () returned 0x3150000 [0055.623] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.623] GetProcessHeap () returned 0x3150000 [0055.624] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\es-MX\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162eb8 [0055.624] GetProcessHeap () returned 0x3150000 [0055.624] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.624] GetProcessHeap () returned 0x3150000 [0055.624] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\et-EE\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.624] GetProcessHeap () returned 0x3150000 [0055.624] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.624] GetProcessHeap () returned 0x3150000 [0055.624] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.624] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fi-FI\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162fb8 [0055.625] GetProcessHeap () returned 0x3150000 [0055.625] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.625] GetProcessHeap () returned 0x3150000 [0055.625] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Fonts\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.629] GetProcessHeap () returned 0x3150000 [0055.629] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.629] GetProcessHeap () returned 0x3150000 [0055.629] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.630] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-CA\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.631] GetProcessHeap () returned 0x3150000 [0055.631] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.631] GetProcessHeap () returned 0x3150000 [0055.631] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\fr-FR\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.631] GetProcessHeap () returned 0x3150000 [0055.631] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.631] GetProcessHeap () returned 0x3150000 [0055.631] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.631] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hr-HR\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.632] GetProcessHeap () returned 0x3150000 [0055.632] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.632] GetProcessHeap () returned 0x3150000 [0055.632] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\hu-HU\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.632] GetProcessHeap () returned 0x3150000 [0055.632] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.632] GetProcessHeap () returned 0x3150000 [0055.632] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\it-IT\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.633] GetProcessHeap () returned 0x3150000 [0055.633] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.633] GetProcessHeap () returned 0x3150000 [0055.633] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ja-JP\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.633] GetProcessHeap () returned 0x3150000 [0055.633] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.633] GetProcessHeap () returned 0x3150000 [0055.633] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.633] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ko-KR\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.634] GetProcessHeap () returned 0x3150000 [0055.634] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.634] GetProcessHeap () returned 0x3150000 [0055.634] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lt-LT\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.634] GetProcessHeap () returned 0x3150000 [0055.634] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.634] GetProcessHeap () returned 0x3150000 [0055.634] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\lv-LV\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.635] GetProcessHeap () returned 0x3150000 [0055.635] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.635] GetProcessHeap () returned 0x3150000 [0055.635] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nb-NO\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.636] GetProcessHeap () returned 0x3150000 [0055.636] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.636] GetProcessHeap () returned 0x3150000 [0055.636] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\nl-NL\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.636] GetProcessHeap () returned 0x3150000 [0055.636] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.636] GetProcessHeap () returned 0x3150000 [0055.636] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pl-PL\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.637] GetProcessHeap () returned 0x3150000 [0055.637] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.637] GetProcessHeap () returned 0x3150000 [0055.637] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.637] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-BR\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.638] GetProcessHeap () returned 0x3150000 [0055.638] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.638] GetProcessHeap () returned 0x3150000 [0055.638] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\pt-PT\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.638] GetProcessHeap () returned 0x3150000 [0055.638] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.638] GetProcessHeap () returned 0x3150000 [0055.638] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.639] GetProcessHeap () returned 0x3150000 [0055.639] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.639] GetProcessHeap () returned 0x3150000 [0055.639] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.639] GetProcessHeap () returned 0x3150000 [0055.639] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0055.640] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.640] GetProcessHeap () returned 0x3150000 [0055.640] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0055.640] GetProcessHeap () returned 0x3150000 [0055.640] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.641] GetProcessHeap () returned 0x3150000 [0055.641] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.641] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ro-RO\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.642] GetProcessHeap () returned 0x3150000 [0055.642] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.642] GetProcessHeap () returned 0x3150000 [0055.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.642] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\ru-RU\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.643] GetProcessHeap () returned 0x3150000 [0055.643] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.643] GetProcessHeap () returned 0x3150000 [0055.643] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sk-SK\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.643] GetProcessHeap () returned 0x3150000 [0055.643] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.643] GetProcessHeap () returned 0x3150000 [0055.643] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sl-SI\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.644] GetProcessHeap () returned 0x3150000 [0055.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.644] GetProcessHeap () returned 0x3150000 [0055.644] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.644] GetProcessHeap () returned 0x3150000 [0055.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.644] GetProcessHeap () returned 0x3150000 [0055.644] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162e78 [0055.645] GetProcessHeap () returned 0x3150000 [0055.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.645] GetProcessHeap () returned 0x3150000 [0055.645] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\sv-SE\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.645] GetProcessHeap () returned 0x3150000 [0055.645] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.645] GetProcessHeap () returned 0x3150000 [0055.645] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\tr-TR\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.646] GetProcessHeap () returned 0x3150000 [0055.646] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.646] GetProcessHeap () returned 0x3150000 [0055.646] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\uk-UA\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.646] GetProcessHeap () returned 0x3150000 [0055.646] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.647] GetProcessHeap () returned 0x3150000 [0055.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-CN\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162fb8 [0055.647] GetProcessHeap () returned 0x3150000 [0055.647] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.647] GetProcessHeap () returned 0x3150000 [0055.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-HK\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.647] GetProcessHeap () returned 0x3150000 [0055.647] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.648] GetProcessHeap () returned 0x3150000 [0055.648] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Boot\\zh-TW\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162df8 [0055.648] GetProcessHeap () returned 0x3150000 [0055.648] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.648] GetProcessHeap () returned 0x3150000 [0055.648] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0055.649] GetProcessHeap () returned 0x3150000 [0055.649] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\ESD\\*", lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.798] GetProcessHeap () returned 0x3150000 [0055.798] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.798] GetProcessHeap () returned 0x3150000 [0055.798] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Logs\\*", lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.801] GetProcessHeap () returned 0x3150000 [0055.801] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.802] GetProcessHeap () returned 0x3150000 [0055.802] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\PerfLogs\\*", lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.802] GetProcessHeap () returned 0x3150000 [0055.802] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0055.802] GetProcessHeap () returned 0x3150000 [0055.802] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0055.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\*", lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x902952c, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x902952c, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x3162f78 [0055.802] GetProcessHeap () returned 0x3150000 [0055.802] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0055.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x538277e, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x538277e, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x3163078 [0055.803] GetProcessHeap () returned 0x3150000 [0055.803] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0055.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162fb8 [0055.803] GetProcessHeap () returned 0x3150000 [0055.803] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0055.803] GetProcessHeap () returned 0x3150000 [0055.803] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0055.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x31630b8 [0055.804] GetProcessHeap () returned 0x3150000 [0055.804] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0055.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162fb8 [0055.804] GetProcessHeap () returned 0x3150000 [0055.804] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0055.804] GetProcessHeap () returned 0x3150000 [0055.804] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0055.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3162fb8 [0055.805] GetProcessHeap () returned 0x3150000 [0055.805] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0055.805] GetProcessHeap () returned 0x3150000 [0055.805] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.805] GetProcessHeap () returned 0x3150000 [0055.805] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0055.806] GetProcessHeap () returned 0x3150000 [0055.806] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.806] GetProcessHeap () returned 0x3150000 [0055.806] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0055.806] GetProcessHeap () returned 0x3150000 [0055.806] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.806] GetProcessHeap () returned 0x3150000 [0055.806] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d24f8 [0055.806] GetProcessHeap () returned 0x3150000 [0055.806] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.806] GetProcessHeap () returned 0x3150000 [0055.806] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d27f8 [0055.806] GetProcessHeap () returned 0x3150000 [0055.806] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.806] GetProcessHeap () returned 0x3150000 [0055.806] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d29b8 [0055.807] GetProcessHeap () returned 0x3150000 [0055.807] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.807] GetProcessHeap () returned 0x3150000 [0055.807] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2a38 [0055.807] GetProcessHeap () returned 0x3150000 [0055.807] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.807] GetProcessHeap () returned 0x3150000 [0055.807] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d26b8 [0055.808] GetProcessHeap () returned 0x3150000 [0055.808] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.808] GetProcessHeap () returned 0x3150000 [0055.808] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2838 [0055.809] GetProcessHeap () returned 0x3150000 [0055.809] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.809] GetProcessHeap () returned 0x3150000 [0055.809] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1df8 [0055.809] GetProcessHeap () returned 0x3150000 [0055.809] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.810] GetProcessHeap () returned 0x3150000 [0055.810] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0055.811] GetProcessHeap () returned 0x3150000 [0055.811] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.811] GetProcessHeap () returned 0x3150000 [0055.811] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d24f8 [0055.811] GetProcessHeap () returned 0x3150000 [0055.811] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.811] GetProcessHeap () returned 0x3150000 [0055.811] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0055.811] GetProcessHeap () returned 0x3150000 [0055.811] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.811] GetProcessHeap () returned 0x3150000 [0055.811] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d27f8 [0055.811] GetProcessHeap () returned 0x3150000 [0055.811] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0055.811] GetProcessHeap () returned 0x3150000 [0055.811] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0055.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0056.241] GetProcessHeap () returned 0x3150000 [0056.241] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d3c18 [0056.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0056.241] GetProcessHeap () returned 0x3150000 [0056.241] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d3c18 | out: hHeap=0x3150000) returned 1 [0056.241] GetProcessHeap () returned 0x3150000 [0056.241] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d3c18 [0056.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0056.242] GetProcessHeap () returned 0x3150000 [0056.242] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d3c18 | out: hHeap=0x3150000) returned 1 [0056.242] GetProcessHeap () returned 0x3150000 [0056.242] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d3c18 [0056.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0056.242] GetProcessHeap () returned 0x3150000 [0056.242] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d3c18 | out: hHeap=0x3150000) returned 1 [0056.242] GetProcessHeap () returned 0x3150000 [0056.242] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d3c18 [0056.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0056.243] GetProcessHeap () returned 0x3150000 [0056.243] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d3c18 | out: hHeap=0x3150000) returned 1 [0056.243] GetProcessHeap () returned 0x3150000 [0056.244] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d3c18 [0056.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0056.244] GetProcessHeap () returned 0x3150000 [0056.244] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d3c18 | out: hHeap=0x3150000) returned 1 [0056.244] GetProcessHeap () returned 0x3150000 [0056.244] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d3c18 [0056.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0056.244] GetProcessHeap () returned 0x3150000 [0056.244] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d3c18 | out: hHeap=0x3150000) returned 1 [0056.244] GetProcessHeap () returned 0x3150000 [0056.244] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d3c18 [0056.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0056.244] GetProcessHeap () returned 0x3150000 [0056.244] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d3c18 | out: hHeap=0x3150000) returned 1 [0056.244] GetProcessHeap () returned 0x3150000 [0056.244] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d3c18 [0056.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0056.245] GetProcessHeap () returned 0x3150000 [0056.245] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d3c18 | out: hHeap=0x3150000) returned 1 [0056.245] GetProcessHeap () returned 0x3150000 [0056.245] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d3c18 [0056.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0056.245] GetProcessHeap () returned 0x3150000 [0056.245] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d3c18 | out: hHeap=0x3150000) returned 1 [0056.245] GetProcessHeap () returned 0x3150000 [0056.245] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d3c18 [0056.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0056.246] GetProcessHeap () returned 0x3150000 [0056.246] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d3c18 | out: hHeap=0x3150000) returned 1 [0056.246] GetProcessHeap () returned 0x3150000 [0056.246] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.247] GetProcessHeap () returned 0x3150000 [0056.247] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0056.248] GetProcessHeap () returned 0x3150000 [0056.248] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.248] GetProcessHeap () returned 0x3150000 [0056.248] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0056.248] GetProcessHeap () returned 0x3150000 [0056.248] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.248] GetProcessHeap () returned 0x3150000 [0056.248] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0056.248] GetProcessHeap () returned 0x3150000 [0056.248] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.249] GetProcessHeap () returned 0x3150000 [0056.249] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0056.249] GetProcessHeap () returned 0x3150000 [0056.249] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.249] GetProcessHeap () returned 0x3150000 [0056.249] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0056.250] GetProcessHeap () returned 0x3150000 [0056.250] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.250] GetProcessHeap () returned 0x3150000 [0056.250] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0056.250] GetProcessHeap () returned 0x3150000 [0056.250] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.250] GetProcessHeap () returned 0x3150000 [0056.250] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0056.250] GetProcessHeap () returned 0x3150000 [0056.250] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.250] GetProcessHeap () returned 0x3150000 [0056.250] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0056.251] GetProcessHeap () returned 0x3150000 [0056.251] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.251] GetProcessHeap () returned 0x3150000 [0056.251] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0056.251] GetProcessHeap () returned 0x3150000 [0056.251] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.251] GetProcessHeap () returned 0x3150000 [0056.251] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0056.252] GetProcessHeap () returned 0x3150000 [0056.252] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.252] GetProcessHeap () returned 0x3150000 [0056.252] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0056.252] GetProcessHeap () returned 0x3150000 [0056.252] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.252] GetProcessHeap () returned 0x3150000 [0056.252] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0056.253] GetProcessHeap () returned 0x3150000 [0056.253] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.253] GetProcessHeap () returned 0x3150000 [0056.253] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0056.253] GetProcessHeap () returned 0x3150000 [0056.253] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.253] GetProcessHeap () returned 0x3150000 [0056.253] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0056.253] GetProcessHeap () returned 0x3150000 [0056.253] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.253] GetProcessHeap () returned 0x3150000 [0056.253] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0056.254] GetProcessHeap () returned 0x3150000 [0056.254] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.254] GetProcessHeap () returned 0x3150000 [0056.254] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0056.254] GetProcessHeap () returned 0x3150000 [0056.254] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.254] GetProcessHeap () returned 0x3150000 [0056.254] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0056.255] GetProcessHeap () returned 0x3150000 [0056.255] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.255] GetProcessHeap () returned 0x3150000 [0056.255] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0056.255] GetProcessHeap () returned 0x3150000 [0056.255] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.255] GetProcessHeap () returned 0x3150000 [0056.255] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0056.255] GetProcessHeap () returned 0x3150000 [0056.255] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.255] GetProcessHeap () returned 0x3150000 [0056.255] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0056.256] GetProcessHeap () returned 0x3150000 [0056.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.256] GetProcessHeap () returned 0x3150000 [0056.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0056.256] GetProcessHeap () returned 0x3150000 [0056.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.256] GetProcessHeap () returned 0x3150000 [0056.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0056.263] GetProcessHeap () returned 0x3150000 [0056.263] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.263] GetProcessHeap () returned 0x3150000 [0056.263] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0056.263] GetProcessHeap () returned 0x3150000 [0056.263] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.263] GetProcessHeap () returned 0x3150000 [0056.263] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0056.264] GetProcessHeap () returned 0x3150000 [0056.264] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.264] GetProcessHeap () returned 0x3150000 [0056.264] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0056.264] GetProcessHeap () returned 0x3150000 [0056.264] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.264] GetProcessHeap () returned 0x3150000 [0056.264] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57c1c00 [0056.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0056.264] GetProcessHeap () returned 0x3150000 [0056.264] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57c1c00 | out: hHeap=0x3150000) returned 1 [0056.264] GetProcessHeap () returned 0x3150000 [0056.264] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0056.265] GetProcessHeap () returned 0x3150000 [0056.265] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0056.266] GetProcessHeap () returned 0x3150000 [0056.266] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0056.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0056.267] GetProcessHeap () returned 0x3150000 [0056.267] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0056.267] GetProcessHeap () returned 0x3150000 [0056.267] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.268] GetProcessHeap () returned 0x3150000 [0056.268] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0056.269] GetProcessHeap () returned 0x3150000 [0056.269] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0056.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0056.271] GetProcessHeap () returned 0x3150000 [0056.271] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0056.272] GetProcessHeap () returned 0x3150000 [0056.272] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.272] GetProcessHeap () returned 0x3150000 [0056.272] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0056.273] GetProcessHeap () returned 0x3150000 [0056.273] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.273] GetProcessHeap () returned 0x3150000 [0056.273] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0056.274] GetProcessHeap () returned 0x3150000 [0056.274] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.274] GetProcessHeap () returned 0x3150000 [0056.274] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0056.276] GetProcessHeap () returned 0x3150000 [0056.276] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.276] GetProcessHeap () returned 0x3150000 [0056.276] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0056.277] GetProcessHeap () returned 0x3150000 [0056.277] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0056.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0056.277] GetProcessHeap () returned 0x3150000 [0056.277] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0056.277] GetProcessHeap () returned 0x3150000 [0056.277] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.279] GetProcessHeap () returned 0x3150000 [0056.279] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0056.280] GetProcessHeap () returned 0x3150000 [0056.280] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0056.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0056.280] GetProcessHeap () returned 0x3150000 [0056.280] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0056.281] GetProcessHeap () returned 0x3150000 [0056.281] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.281] GetProcessHeap () returned 0x3150000 [0056.281] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VC\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0056.521] GetProcessHeap () returned 0x3150000 [0056.521] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.521] GetProcessHeap () returned 0x3150000 [0056.521] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0056.521] GetProcessHeap () returned 0x3150000 [0056.521] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.521] GetProcessHeap () returned 0x3150000 [0056.521] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0056.522] GetProcessHeap () returned 0x3150000 [0056.522] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0056.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0056.524] GetProcessHeap () returned 0x3150000 [0056.524] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0056.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0056.527] GetProcessHeap () returned 0x3150000 [0056.527] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0056.527] GetProcessHeap () returned 0x3150000 [0056.527] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0056.528] GetProcessHeap () returned 0x3150000 [0056.529] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.529] GetProcessHeap () returned 0x3150000 [0056.529] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0056.529] GetProcessHeap () returned 0x3150000 [0056.529] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0056.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0056.530] GetProcessHeap () returned 0x3150000 [0056.530] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0056.530] GetProcessHeap () returned 0x3150000 [0056.530] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0056.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0056.532] GetProcessHeap () returned 0x3150000 [0056.532] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0056.534] GetProcessHeap () returned 0x3150000 [0056.534] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0056.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\ado\\en-US\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0056.534] GetProcessHeap () returned 0x3150000 [0056.534] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0056.534] GetProcessHeap () returned 0x3150000 [0056.535] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.535] GetProcessHeap () returned 0x3150000 [0056.535] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\en-US\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0056.536] GetProcessHeap () returned 0x3150000 [0056.536] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.536] GetProcessHeap () returned 0x3150000 [0056.536] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0056.538] GetProcessHeap () returned 0x3150000 [0056.538] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0056.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0056.539] GetProcessHeap () returned 0x3150000 [0056.539] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0056.539] GetProcessHeap () returned 0x3150000 [0056.539] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.539] GetProcessHeap () returned 0x3150000 [0056.539] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0056.541] GetProcessHeap () returned 0x3150000 [0056.541] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0056.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0056.542] GetProcessHeap () returned 0x3150000 [0056.542] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0056.542] GetProcessHeap () returned 0x3150000 [0056.542] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.543] GetProcessHeap () returned 0x3150000 [0056.543] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0056.543] GetProcessHeap () returned 0x3150000 [0056.543] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0056.545] GetProcessHeap () returned 0x3150000 [0056.545] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x538277e, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x538277e, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0056.545] GetProcessHeap () returned 0x3150000 [0056.545] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0056.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\en-US\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0056.546] GetProcessHeap () returned 0x3150000 [0056.546] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0056.546] GetProcessHeap () returned 0x3150000 [0056.546] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0056.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\images\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0056.546] GetProcessHeap () returned 0x3150000 [0056.546] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0056.546] GetProcessHeap () returned 0x3150000 [0056.546] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0056.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Internet Explorer\\SIGNUP\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0056.546] GetProcessHeap () returned 0x3150000 [0056.546] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0056.547] GetProcessHeap () returned 0x3150000 [0056.547] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.547] GetProcessHeap () returned 0x3150000 [0056.547] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x64590e0, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x64590e0, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0056.548] GetProcessHeap () returned 0x3150000 [0056.548] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0056.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0056.549] GetProcessHeap () returned 0x3150000 [0056.549] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0056.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0056.551] GetProcessHeap () returned 0x3150000 [0056.551] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0056.551] GetProcessHeap () returned 0x3150000 [0056.551] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.552] GetProcessHeap () returned 0x3150000 [0056.552] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0056.553] GetProcessHeap () returned 0x3150000 [0056.553] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.554] GetProcessHeap () returned 0x3150000 [0056.554] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0056.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0056.554] GetProcessHeap () returned 0x3150000 [0056.554] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0056.554] GetProcessHeap () returned 0x3150000 [0056.554] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0056.555] GetProcessHeap () returned 0x3150000 [0056.555] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0056.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0056.819] GetProcessHeap () returned 0x3150000 [0056.819] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0056.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0056.820] GetProcessHeap () returned 0x3150000 [0056.820] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0056.820] GetProcessHeap () returned 0x3150000 [0056.820] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0056.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0056.823] GetProcessHeap () returned 0x3150000 [0056.823] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0056.823] GetProcessHeap () returned 0x3150000 [0056.823] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0056.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0056.824] GetProcessHeap () returned 0x3150000 [0056.824] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0056.824] GetProcessHeap () returned 0x3150000 [0056.824] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0056.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0056.826] GetProcessHeap () returned 0x3150000 [0056.826] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0056.826] GetProcessHeap () returned 0x3150000 [0056.826] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0056.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0056.828] GetProcessHeap () returned 0x3150000 [0056.828] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0056.829] GetProcessHeap () returned 0x3150000 [0056.829] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0056.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0056.831] GetProcessHeap () returned 0x3150000 [0056.831] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0056.831] GetProcessHeap () returned 0x3150000 [0056.831] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0056.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0056.832] GetProcessHeap () returned 0x3150000 [0056.832] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0056.832] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffcc76, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0056.835] GetProcessHeap () returned 0x3150000 [0056.835] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0056.835] GetProcessHeap () returned 0x3150000 [0056.835] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0056.836] GetProcessHeap () returned 0x3150000 [0056.836] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0056.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0056.837] GetProcessHeap () returned 0x3150000 [0056.837] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0056.837] GetProcessHeap () returned 0x3150000 [0056.837] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0056.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0056.840] GetProcessHeap () returned 0x3150000 [0056.840] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0056.840] GetProcessHeap () returned 0x3150000 [0056.840] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0056.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0056.843] GetProcessHeap () returned 0x3150000 [0056.843] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0056.843] GetProcessHeap () returned 0x3150000 [0056.843] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0056.844] GetProcessHeap () returned 0x3150000 [0056.844] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0056.844] GetProcessHeap () returned 0x3150000 [0056.844] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0056.845] GetProcessHeap () returned 0x3150000 [0056.845] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0056.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0056.845] GetProcessHeap () returned 0x3150000 [0056.845] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0056.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0056.846] GetProcessHeap () returned 0x3150000 [0056.846] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0056.846] GetProcessHeap () returned 0x3150000 [0056.846] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0056.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0056.850] GetProcessHeap () returned 0x3150000 [0056.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0056.850] GetProcessHeap () returned 0x3150000 [0056.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0056.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0056.851] GetProcessHeap () returned 0x3150000 [0056.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0056.851] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0056.853] GetProcessHeap () returned 0x3150000 [0056.853] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0056.853] GetProcessHeap () returned 0x3150000 [0056.853] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0056.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0056.853] GetProcessHeap () returned 0x3150000 [0056.853] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0056.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0057.055] GetProcessHeap () returned 0x3150000 [0057.055] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.055] GetProcessHeap () returned 0x3150000 [0057.055] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0057.056] GetProcessHeap () returned 0x3150000 [0057.056] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0057.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffcc76, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0057.058] GetProcessHeap () returned 0x3150000 [0057.058] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0057.058] GetProcessHeap () returned 0x3150000 [0057.058] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.059] GetProcessHeap () returned 0x3150000 [0057.059] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0057.059] GetProcessHeap () returned 0x3150000 [0057.060] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0057.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0057.061] GetProcessHeap () returned 0x3150000 [0057.061] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0057.064] GetProcessHeap () returned 0x3150000 [0057.064] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.064] GetProcessHeap () returned 0x3150000 [0057.064] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0057.314] GetProcessHeap () returned 0x3150000 [0057.314] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.314] GetProcessHeap () returned 0x3150000 [0057.314] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0057.317] GetProcessHeap () returned 0x3150000 [0057.317] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.317] GetProcessHeap () returned 0x3150000 [0057.317] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0057.318] GetProcessHeap () returned 0x3150000 [0057.318] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0057.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0057.321] GetProcessHeap () returned 0x3150000 [0057.321] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0057.321] GetProcessHeap () returned 0x3150000 [0057.321] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0057.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0057.324] GetProcessHeap () returned 0x3150000 [0057.324] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0057.324] GetProcessHeap () returned 0x3150000 [0057.324] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0057.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0057.328] GetProcessHeap () returned 0x3150000 [0057.328] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0057.328] GetProcessHeap () returned 0x3150000 [0057.328] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0057.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0057.760] GetProcessHeap () returned 0x3150000 [0057.760] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0057.761] GetProcessHeap () returned 0x3150000 [0057.761] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0057.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\loc\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0057.761] GetProcessHeap () returned 0x3150000 [0057.761] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0057.761] GetProcessHeap () returned 0x3150000 [0057.761] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0057.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0057.762] GetProcessHeap () returned 0x3150000 [0057.762] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0057.767] GetProcessHeap () returned 0x3150000 [0057.767] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.767] GetProcessHeap () returned 0x3150000 [0057.767] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0057.770] GetProcessHeap () returned 0x3150000 [0057.770] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.770] GetProcessHeap () returned 0x3150000 [0057.770] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0057.771] GetProcessHeap () returned 0x3150000 [0057.771] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.771] GetProcessHeap () returned 0x3150000 [0057.771] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0057.774] GetProcessHeap () returned 0x3150000 [0057.774] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.774] GetProcessHeap () returned 0x3150000 [0057.774] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0057.775] GetProcessHeap () returned 0x3150000 [0057.775] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0057.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0057.892] GetProcessHeap () returned 0x3150000 [0057.892] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0057.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0057.894] GetProcessHeap () returned 0x3150000 [0057.894] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0057.895] GetProcessHeap () returned 0x3150000 [0057.895] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.895] GetProcessHeap () returned 0x3150000 [0057.895] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0057.897] GetProcessHeap () returned 0x3150000 [0057.897] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.906] GetProcessHeap () returned 0x3150000 [0057.906] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0057.910] GetProcessHeap () returned 0x3150000 [0057.910] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.910] GetProcessHeap () returned 0x3150000 [0057.910] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0057.915] GetProcessHeap () returned 0x3150000 [0057.915] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.915] GetProcessHeap () returned 0x3150000 [0057.915] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0057.918] GetProcessHeap () returned 0x3150000 [0057.918] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0057.930] GetProcessHeap () returned 0x3150000 [0057.930] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0057.931] GetProcessHeap () returned 0x3150000 [0057.931] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0057.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0057.932] GetProcessHeap () returned 0x3150000 [0057.932] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0057.932] GetProcessHeap () returned 0x3150000 [0057.932] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0057.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0057.933] GetProcessHeap () returned 0x3150000 [0057.933] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0057.933] GetProcessHeap () returned 0x3150000 [0057.933] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0057.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0057.933] GetProcessHeap () returned 0x3150000 [0057.933] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0057.933] GetProcessHeap () returned 0x3150000 [0057.933] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0057.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0057.935] GetProcessHeap () returned 0x3150000 [0057.935] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0057.935] GetProcessHeap () returned 0x3150000 [0057.935] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0057.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0057.935] GetProcessHeap () returned 0x3150000 [0057.935] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0057.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0057.936] GetProcessHeap () returned 0x3150000 [0057.936] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0057.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffcc76, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0057.936] GetProcessHeap () returned 0x3150000 [0057.936] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0057.936] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0057.938] GetProcessHeap () returned 0x3150000 [0057.938] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0057.938] GetProcessHeap () returned 0x3150000 [0057.938] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0057.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0058.128] GetProcessHeap () returned 0x3150000 [0058.128] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.128] GetProcessHeap () returned 0x3150000 [0058.128] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0058.130] GetProcessHeap () returned 0x3150000 [0058.130] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.130] GetProcessHeap () returned 0x3150000 [0058.130] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.130] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0058.132] GetProcessHeap () returned 0x3150000 [0058.133] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.133] GetProcessHeap () returned 0x3150000 [0058.133] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0058.140] GetProcessHeap () returned 0x3150000 [0058.141] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.141] GetProcessHeap () returned 0x3150000 [0058.141] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.141] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0058.143] GetProcessHeap () returned 0x3150000 [0058.143] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.143] GetProcessHeap () returned 0x3150000 [0058.143] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0058.146] GetProcessHeap () returned 0x3150000 [0058.146] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.146] GetProcessHeap () returned 0x3150000 [0058.146] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.146] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0058.148] GetProcessHeap () returned 0x3150000 [0058.148] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.148] GetProcessHeap () returned 0x3150000 [0058.148] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.148] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0058.150] GetProcessHeap () returned 0x3150000 [0058.150] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.150] GetProcessHeap () returned 0x3150000 [0058.150] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.150] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0058.157] GetProcessHeap () returned 0x3150000 [0058.157] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.157] GetProcessHeap () returned 0x3150000 [0058.157] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0058.159] GetProcessHeap () returned 0x3150000 [0058.159] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.159] GetProcessHeap () returned 0x3150000 [0058.159] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0058.161] GetProcessHeap () returned 0x3150000 [0058.161] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.161] GetProcessHeap () returned 0x3150000 [0058.161] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0058.162] GetProcessHeap () returned 0x3150000 [0058.162] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.163] GetProcessHeap () returned 0x3150000 [0058.163] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.163] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0058.332] GetProcessHeap () returned 0x3150000 [0058.332] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.332] GetProcessHeap () returned 0x3150000 [0058.332] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0058.334] GetProcessHeap () returned 0x3150000 [0058.334] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.334] GetProcessHeap () returned 0x3150000 [0058.334] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0058.336] GetProcessHeap () returned 0x3150000 [0058.336] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.336] GetProcessHeap () returned 0x3150000 [0058.336] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0058.338] GetProcessHeap () returned 0x3150000 [0058.338] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.338] GetProcessHeap () returned 0x3150000 [0058.338] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0058.340] GetProcessHeap () returned 0x3150000 [0058.341] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.341] GetProcessHeap () returned 0x3150000 [0058.341] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0058.344] GetProcessHeap () returned 0x3150000 [0058.344] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.344] GetProcessHeap () returned 0x3150000 [0058.344] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0058.346] GetProcessHeap () returned 0x3150000 [0058.347] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.347] GetProcessHeap () returned 0x3150000 [0058.347] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0058.349] GetProcessHeap () returned 0x3150000 [0058.349] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.350] GetProcessHeap () returned 0x3150000 [0058.350] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0058.352] GetProcessHeap () returned 0x3150000 [0058.352] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.352] GetProcessHeap () returned 0x3150000 [0058.352] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0058.354] GetProcessHeap () returned 0x3150000 [0058.355] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.355] GetProcessHeap () returned 0x3150000 [0058.355] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0058.356] GetProcessHeap () returned 0x3150000 [0058.357] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.357] GetProcessHeap () returned 0x3150000 [0058.357] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0058.358] GetProcessHeap () returned 0x3150000 [0058.358] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.359] GetProcessHeap () returned 0x3150000 [0058.359] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0058.360] GetProcessHeap () returned 0x3150000 [0058.360] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.360] GetProcessHeap () returned 0x3150000 [0058.360] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0058.362] GetProcessHeap () returned 0x3150000 [0058.362] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.362] GetProcessHeap () returned 0x3150000 [0058.362] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.362] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0058.364] GetProcessHeap () returned 0x3150000 [0058.364] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.364] GetProcessHeap () returned 0x3150000 [0058.364] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0058.725] GetProcessHeap () returned 0x3150000 [0058.725] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.725] GetProcessHeap () returned 0x3150000 [0058.725] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0058.728] GetProcessHeap () returned 0x3150000 [0058.728] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.728] GetProcessHeap () returned 0x3150000 [0058.728] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0058.729] GetProcessHeap () returned 0x3150000 [0058.729] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.730] GetProcessHeap () returned 0x3150000 [0058.730] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0058.731] GetProcessHeap () returned 0x3150000 [0058.731] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.731] GetProcessHeap () returned 0x3150000 [0058.731] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0058.734] GetProcessHeap () returned 0x3150000 [0058.734] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.734] GetProcessHeap () returned 0x3150000 [0058.734] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0058.735] GetProcessHeap () returned 0x3150000 [0058.735] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.735] GetProcessHeap () returned 0x3150000 [0058.735] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0058.737] GetProcessHeap () returned 0x3150000 [0058.738] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.738] GetProcessHeap () returned 0x3150000 [0058.738] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0058.739] GetProcessHeap () returned 0x3150000 [0058.739] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.739] GetProcessHeap () returned 0x3150000 [0058.739] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0058.742] GetProcessHeap () returned 0x3150000 [0058.742] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.742] GetProcessHeap () returned 0x3150000 [0058.742] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.742] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0058.744] GetProcessHeap () returned 0x3150000 [0058.744] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.744] GetProcessHeap () returned 0x3150000 [0058.744] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.744] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0058.745] GetProcessHeap () returned 0x3150000 [0058.745] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.745] GetProcessHeap () returned 0x3150000 [0058.745] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.745] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0058.747] GetProcessHeap () returned 0x3150000 [0058.747] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.747] GetProcessHeap () returned 0x3150000 [0058.747] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.747] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0058.749] GetProcessHeap () returned 0x3150000 [0058.749] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.749] GetProcessHeap () returned 0x3150000 [0058.749] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.749] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0058.751] GetProcessHeap () returned 0x3150000 [0058.751] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.751] GetProcessHeap () returned 0x3150000 [0058.751] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.751] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0058.753] GetProcessHeap () returned 0x3150000 [0058.753] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.753] GetProcessHeap () returned 0x3150000 [0058.753] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0058.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xffffea76, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0058.754] GetProcessHeap () returned 0x3150000 [0058.754] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0058.754] GetProcessHeap () returned 0x3150000 [0058.754] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0058.755] GetProcessHeap () returned 0x3150000 [0058.755] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0058.756] GetProcessHeap () returned 0x3150000 [0058.756] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0058.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0058.757] GetProcessHeap () returned 0x3150000 [0058.757] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0058.757] GetProcessHeap () returned 0x3150000 [0058.757] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0058.757] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0058.758] GetProcessHeap () returned 0x3150000 [0058.758] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0058.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0059.019] GetProcessHeap () returned 0x3150000 [0059.019] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.019] GetProcessHeap () returned 0x3150000 [0059.019] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0059.020] GetProcessHeap () returned 0x3150000 [0059.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.020] GetProcessHeap () returned 0x3150000 [0059.020] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0059.022] GetProcessHeap () returned 0x3150000 [0059.022] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.022] GetProcessHeap () returned 0x3150000 [0059.022] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0059.024] GetProcessHeap () returned 0x3150000 [0059.024] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.024] GetProcessHeap () returned 0x3150000 [0059.024] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0059.027] GetProcessHeap () returned 0x3150000 [0059.027] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.027] GetProcessHeap () returned 0x3150000 [0059.027] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0059.028] GetProcessHeap () returned 0x3150000 [0059.028] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.028] GetProcessHeap () returned 0x3150000 [0059.028] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0059.030] GetProcessHeap () returned 0x3150000 [0059.030] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.030] GetProcessHeap () returned 0x3150000 [0059.030] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.032] GetProcessHeap () returned 0x3150000 [0059.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.032] GetProcessHeap () returned 0x3150000 [0059.032] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0059.034] GetProcessHeap () returned 0x3150000 [0059.034] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.034] GetProcessHeap () returned 0x3150000 [0059.034] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0059.035] GetProcessHeap () returned 0x3150000 [0059.035] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.035] GetProcessHeap () returned 0x3150000 [0059.035] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0059.037] GetProcessHeap () returned 0x3150000 [0059.037] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.037] GetProcessHeap () returned 0x3150000 [0059.037] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.039] GetProcessHeap () returned 0x3150000 [0059.039] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.039] GetProcessHeap () returned 0x3150000 [0059.039] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0059.042] GetProcessHeap () returned 0x3150000 [0059.042] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.042] GetProcessHeap () returned 0x3150000 [0059.042] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0059.043] GetProcessHeap () returned 0x3150000 [0059.043] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.043] GetProcessHeap () returned 0x3150000 [0059.043] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0059.045] GetProcessHeap () returned 0x3150000 [0059.045] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.045] GetProcessHeap () returned 0x3150000 [0059.045] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0059.047] GetProcessHeap () returned 0x3150000 [0059.047] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.047] GetProcessHeap () returned 0x3150000 [0059.047] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0059.048] GetProcessHeap () returned 0x3150000 [0059.048] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.048] GetProcessHeap () returned 0x3150000 [0059.048] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0059.050] GetProcessHeap () returned 0x3150000 [0059.050] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.050] GetProcessHeap () returned 0x3150000 [0059.050] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0059.052] GetProcessHeap () returned 0x3150000 [0059.052] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.052] GetProcessHeap () returned 0x3150000 [0059.052] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0059.053] GetProcessHeap () returned 0x3150000 [0059.053] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.053] GetProcessHeap () returned 0x3150000 [0059.053] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0059.055] GetProcessHeap () returned 0x3150000 [0059.055] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.055] GetProcessHeap () returned 0x3150000 [0059.055] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0059.219] GetProcessHeap () returned 0x3150000 [0059.219] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.219] GetProcessHeap () returned 0x3150000 [0059.219] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0059.220] GetProcessHeap () returned 0x3150000 [0059.220] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.220] GetProcessHeap () returned 0x3150000 [0059.220] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0059.222] GetProcessHeap () returned 0x3150000 [0059.222] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.222] GetProcessHeap () returned 0x3150000 [0059.222] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0059.223] GetProcessHeap () returned 0x3150000 [0059.223] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.223] GetProcessHeap () returned 0x3150000 [0059.223] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0059.225] GetProcessHeap () returned 0x3150000 [0059.225] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.225] GetProcessHeap () returned 0x3150000 [0059.225] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0059.230] GetProcessHeap () returned 0x3150000 [0059.230] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.230] GetProcessHeap () returned 0x3150000 [0059.230] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0059.232] GetProcessHeap () returned 0x3150000 [0059.232] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.232] GetProcessHeap () returned 0x3150000 [0059.232] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0059.235] GetProcessHeap () returned 0x3150000 [0059.235] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.235] GetProcessHeap () returned 0x3150000 [0059.235] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0059.237] GetProcessHeap () returned 0x3150000 [0059.237] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.237] GetProcessHeap () returned 0x3150000 [0059.237] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0059.238] GetProcessHeap () returned 0x3150000 [0059.238] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.238] GetProcessHeap () returned 0x3150000 [0059.238] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0059.240] GetProcessHeap () returned 0x3150000 [0059.240] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.240] GetProcessHeap () returned 0x3150000 [0059.240] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0059.241] GetProcessHeap () returned 0x3150000 [0059.241] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.241] GetProcessHeap () returned 0x3150000 [0059.241] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.244] GetProcessHeap () returned 0x3150000 [0059.244] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.244] GetProcessHeap () returned 0x3150000 [0059.244] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0059.245] GetProcessHeap () returned 0x3150000 [0059.245] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.245] GetProcessHeap () returned 0x3150000 [0059.245] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0059.247] GetProcessHeap () returned 0x3150000 [0059.247] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.247] GetProcessHeap () returned 0x3150000 [0059.247] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0059.249] GetProcessHeap () returned 0x3150000 [0059.249] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.249] GetProcessHeap () returned 0x3150000 [0059.249] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0059.381] GetProcessHeap () returned 0x3150000 [0059.381] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.381] GetProcessHeap () returned 0x3150000 [0059.381] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.383] GetProcessHeap () returned 0x3150000 [0059.383] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.383] GetProcessHeap () returned 0x3150000 [0059.383] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0059.386] GetProcessHeap () returned 0x3150000 [0059.386] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.386] GetProcessHeap () returned 0x3150000 [0059.386] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0059.387] GetProcessHeap () returned 0x3150000 [0059.388] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.388] GetProcessHeap () returned 0x3150000 [0059.388] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.388] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0059.389] GetProcessHeap () returned 0x3150000 [0059.389] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.389] GetProcessHeap () returned 0x3150000 [0059.389] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.389] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0059.392] GetProcessHeap () returned 0x3150000 [0059.392] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.392] GetProcessHeap () returned 0x3150000 [0059.392] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.392] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.393] GetProcessHeap () returned 0x3150000 [0059.393] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.393] GetProcessHeap () returned 0x3150000 [0059.393] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0059.394] GetProcessHeap () returned 0x3150000 [0059.394] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0059.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0059.395] GetProcessHeap () returned 0x3150000 [0059.396] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0059.397] GetProcessHeap () returned 0x3150000 [0059.397] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.397] GetProcessHeap () returned 0x3150000 [0059.397] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0059.403] GetProcessHeap () returned 0x3150000 [0059.403] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.403] GetProcessHeap () returned 0x3150000 [0059.403] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0059.404] GetProcessHeap () returned 0x3150000 [0059.404] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.404] GetProcessHeap () returned 0x3150000 [0059.404] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0059.407] GetProcessHeap () returned 0x3150000 [0059.407] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.407] GetProcessHeap () returned 0x3150000 [0059.407] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0059.409] GetProcessHeap () returned 0x3150000 [0059.409] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.409] GetProcessHeap () returned 0x3150000 [0059.409] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0059.411] GetProcessHeap () returned 0x3150000 [0059.411] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.411] GetProcessHeap () returned 0x3150000 [0059.411] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0059.413] GetProcessHeap () returned 0x3150000 [0059.413] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.413] GetProcessHeap () returned 0x3150000 [0059.413] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0059.414] GetProcessHeap () returned 0x3150000 [0059.415] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.415] GetProcessHeap () returned 0x3150000 [0059.415] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0059.416] GetProcessHeap () returned 0x3150000 [0059.416] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.416] GetProcessHeap () returned 0x3150000 [0059.416] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0059.579] GetProcessHeap () returned 0x3150000 [0059.579] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.579] GetProcessHeap () returned 0x3150000 [0059.579] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0059.581] GetProcessHeap () returned 0x3150000 [0059.581] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.581] GetProcessHeap () returned 0x3150000 [0059.581] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.581] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.582] GetProcessHeap () returned 0x3150000 [0059.582] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.582] GetProcessHeap () returned 0x3150000 [0059.583] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0059.584] GetProcessHeap () returned 0x3150000 [0059.584] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.584] GetProcessHeap () returned 0x3150000 [0059.584] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0059.586] GetProcessHeap () returned 0x3150000 [0059.586] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.586] GetProcessHeap () returned 0x3150000 [0059.586] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0059.588] GetProcessHeap () returned 0x3150000 [0059.588] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.588] GetProcessHeap () returned 0x3150000 [0059.588] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.588] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0059.590] GetProcessHeap () returned 0x3150000 [0059.590] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.590] GetProcessHeap () returned 0x3150000 [0059.590] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0059.591] GetProcessHeap () returned 0x3150000 [0059.591] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.592] GetProcessHeap () returned 0x3150000 [0059.592] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0059.593] GetProcessHeap () returned 0x3150000 [0059.593] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.593] GetProcessHeap () returned 0x3150000 [0059.593] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0059.595] GetProcessHeap () returned 0x3150000 [0059.595] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.595] GetProcessHeap () returned 0x3150000 [0059.595] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0059.597] GetProcessHeap () returned 0x3150000 [0059.597] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.597] GetProcessHeap () returned 0x3150000 [0059.597] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0059.598] GetProcessHeap () returned 0x3150000 [0059.598] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.598] GetProcessHeap () returned 0x3150000 [0059.598] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0059.600] GetProcessHeap () returned 0x3150000 [0059.600] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.600] GetProcessHeap () returned 0x3150000 [0059.600] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0059.604] GetProcessHeap () returned 0x3150000 [0059.604] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.604] GetProcessHeap () returned 0x3150000 [0059.604] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0059.606] GetProcessHeap () returned 0x3150000 [0059.606] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.606] GetProcessHeap () returned 0x3150000 [0059.606] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0059.607] GetProcessHeap () returned 0x3150000 [0059.607] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.607] GetProcessHeap () returned 0x3150000 [0059.607] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0059.609] GetProcessHeap () returned 0x3150000 [0059.609] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.609] GetProcessHeap () returned 0x3150000 [0059.609] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0059.611] GetProcessHeap () returned 0x3150000 [0059.611] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.611] GetProcessHeap () returned 0x3150000 [0059.611] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0059.613] GetProcessHeap () returned 0x3150000 [0059.613] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.613] GetProcessHeap () returned 0x3150000 [0059.613] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0059.615] GetProcessHeap () returned 0x3150000 [0059.615] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.615] GetProcessHeap () returned 0x3150000 [0059.615] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.615] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0059.616] GetProcessHeap () returned 0x3150000 [0059.616] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.616] GetProcessHeap () returned 0x3150000 [0059.616] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.617] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.822] GetProcessHeap () returned 0x3150000 [0059.822] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.822] GetProcessHeap () returned 0x3150000 [0059.822] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0059.824] GetProcessHeap () returned 0x3150000 [0059.824] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.824] GetProcessHeap () returned 0x3150000 [0059.824] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0059.825] GetProcessHeap () returned 0x3150000 [0059.825] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0059.826] GetProcessHeap () returned 0x3150000 [0059.826] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.826] GetProcessHeap () returned 0x3150000 [0059.826] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0059.826] GetProcessHeap () returned 0x3150000 [0059.826] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.826] GetProcessHeap () returned 0x3150000 [0059.826] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0059.827] GetProcessHeap () returned 0x3150000 [0059.827] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.827] GetProcessHeap () returned 0x3150000 [0059.827] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0059.827] GetProcessHeap () returned 0x3150000 [0059.827] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.827] GetProcessHeap () returned 0x3150000 [0059.827] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0059.828] GetProcessHeap () returned 0x3150000 [0059.828] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.828] GetProcessHeap () returned 0x3150000 [0059.828] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0059.828] GetProcessHeap () returned 0x3150000 [0059.828] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.828] GetProcessHeap () returned 0x3150000 [0059.828] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.828] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.828] GetProcessHeap () returned 0x3150000 [0059.829] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.829] GetProcessHeap () returned 0x3150000 [0059.829] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0059.829] GetProcessHeap () returned 0x3150000 [0059.829] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.829] GetProcessHeap () returned 0x3150000 [0059.829] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.830] GetProcessHeap () returned 0x3150000 [0059.830] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.830] GetProcessHeap () returned 0x3150000 [0059.830] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.831] GetProcessHeap () returned 0x3150000 [0059.831] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.831] GetProcessHeap () returned 0x3150000 [0059.831] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0059.832] GetProcessHeap () returned 0x3150000 [0059.832] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.832] GetProcessHeap () returned 0x3150000 [0059.833] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.833] GetProcessHeap () returned 0x3150000 [0059.833] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.833] GetProcessHeap () returned 0x3150000 [0059.833] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0059.833] GetProcessHeap () returned 0x3150000 [0059.833] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.833] GetProcessHeap () returned 0x3150000 [0059.833] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.833] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.834] GetProcessHeap () returned 0x3150000 [0059.834] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.834] GetProcessHeap () returned 0x3150000 [0059.834] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0059.835] GetProcessHeap () returned 0x3150000 [0059.835] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.835] GetProcessHeap () returned 0x3150000 [0059.835] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0059.836] GetProcessHeap () returned 0x3150000 [0059.836] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.836] GetProcessHeap () returned 0x3150000 [0059.836] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0059.836] GetProcessHeap () returned 0x3150000 [0059.836] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.836] GetProcessHeap () returned 0x3150000 [0059.836] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.837] GetProcessHeap () returned 0x3150000 [0059.837] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.837] GetProcessHeap () returned 0x3150000 [0059.837] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0059.837] GetProcessHeap () returned 0x3150000 [0059.837] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.837] GetProcessHeap () returned 0x3150000 [0059.837] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0059.838] GetProcessHeap () returned 0x3150000 [0059.838] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.838] GetProcessHeap () returned 0x3150000 [0059.838] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.839] GetProcessHeap () returned 0x3150000 [0059.839] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.839] GetProcessHeap () returned 0x3150000 [0059.839] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0059.840] GetProcessHeap () returned 0x3150000 [0059.840] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.840] GetProcessHeap () returned 0x3150000 [0059.840] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.840] GetProcessHeap () returned 0x3150000 [0059.840] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.840] GetProcessHeap () returned 0x3150000 [0059.840] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.841] GetProcessHeap () returned 0x3150000 [0059.841] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.841] GetProcessHeap () returned 0x3150000 [0059.841] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0059.841] GetProcessHeap () returned 0x3150000 [0059.841] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.841] GetProcessHeap () returned 0x3150000 [0059.841] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0059.841] GetProcessHeap () returned 0x3150000 [0059.841] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.841] GetProcessHeap () returned 0x3150000 [0059.841] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0059.842] GetProcessHeap () returned 0x3150000 [0059.842] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.842] GetProcessHeap () returned 0x3150000 [0059.842] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0059.842] GetProcessHeap () returned 0x3150000 [0059.842] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.842] GetProcessHeap () returned 0x3150000 [0059.843] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0059.843] GetProcessHeap () returned 0x3150000 [0059.843] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.843] GetProcessHeap () returned 0x3150000 [0059.843] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0059.843] GetProcessHeap () returned 0x3150000 [0059.843] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.843] GetProcessHeap () returned 0x3150000 [0059.844] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0059.844] GetProcessHeap () returned 0x3150000 [0059.844] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.844] GetProcessHeap () returned 0x3150000 [0059.844] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0059.844] GetProcessHeap () returned 0x3150000 [0059.844] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.844] GetProcessHeap () returned 0x3150000 [0059.845] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0059.845] GetProcessHeap () returned 0x3150000 [0059.845] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.845] GetProcessHeap () returned 0x3150000 [0059.845] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0059.845] GetProcessHeap () returned 0x3150000 [0059.845] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.845] GetProcessHeap () returned 0x3150000 [0059.845] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0059.846] GetProcessHeap () returned 0x3150000 [0059.846] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.846] GetProcessHeap () returned 0x3150000 [0059.846] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0059.846] GetProcessHeap () returned 0x3150000 [0059.846] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.847] GetProcessHeap () returned 0x3150000 [0059.847] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0059.847] GetProcessHeap () returned 0x3150000 [0059.847] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.847] GetProcessHeap () returned 0x3150000 [0059.847] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0059.848] GetProcessHeap () returned 0x3150000 [0059.848] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.848] GetProcessHeap () returned 0x3150000 [0059.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0059.848] GetProcessHeap () returned 0x3150000 [0059.848] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.848] GetProcessHeap () returned 0x3150000 [0059.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0059.849] GetProcessHeap () returned 0x3150000 [0059.849] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.849] GetProcessHeap () returned 0x3150000 [0059.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0059.849] GetProcessHeap () returned 0x3150000 [0059.849] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.849] GetProcessHeap () returned 0x3150000 [0059.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0059.849] GetProcessHeap () returned 0x3150000 [0059.849] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.849] GetProcessHeap () returned 0x3150000 [0059.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0059.850] GetProcessHeap () returned 0x3150000 [0059.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.850] GetProcessHeap () returned 0x3150000 [0059.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0059.850] GetProcessHeap () returned 0x3150000 [0059.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.850] GetProcessHeap () returned 0x3150000 [0059.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0059.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0059.850] GetProcessHeap () returned 0x3150000 [0059.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0059.850] GetProcessHeap () returned 0x3150000 [0059.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.851] GetProcessHeap () returned 0x3150000 [0059.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0059.854] GetProcessHeap () returned 0x3150000 [0059.854] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.854] GetProcessHeap () returned 0x3150000 [0059.854] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.854] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0059.856] GetProcessHeap () returned 0x3150000 [0059.857] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.857] GetProcessHeap () returned 0x3150000 [0059.857] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.857] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0059.859] GetProcessHeap () returned 0x3150000 [0059.859] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.859] GetProcessHeap () returned 0x3150000 [0059.859] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0059.861] GetProcessHeap () returned 0x3150000 [0059.861] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.861] GetProcessHeap () returned 0x3150000 [0059.861] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0059.863] GetProcessHeap () returned 0x3150000 [0059.863] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.863] GetProcessHeap () returned 0x3150000 [0059.863] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0059.865] GetProcessHeap () returned 0x3150000 [0059.865] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.865] GetProcessHeap () returned 0x3150000 [0059.865] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0059.867] GetProcessHeap () returned 0x3150000 [0059.867] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0059.867] GetProcessHeap () returned 0x3150000 [0059.867] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0059.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0060.012] GetProcessHeap () returned 0x3150000 [0060.013] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.013] GetProcessHeap () returned 0x3150000 [0060.013] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0060.015] GetProcessHeap () returned 0x3150000 [0060.015] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.015] GetProcessHeap () returned 0x3150000 [0060.015] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0060.017] GetProcessHeap () returned 0x3150000 [0060.017] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.017] GetProcessHeap () returned 0x3150000 [0060.017] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0060.018] GetProcessHeap () returned 0x3150000 [0060.018] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.019] GetProcessHeap () returned 0x3150000 [0060.019] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0060.020] GetProcessHeap () returned 0x3150000 [0060.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.020] GetProcessHeap () returned 0x3150000 [0060.020] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0060.022] GetProcessHeap () returned 0x3150000 [0060.022] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.022] GetProcessHeap () returned 0x3150000 [0060.022] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0060.024] GetProcessHeap () returned 0x3150000 [0060.024] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.024] GetProcessHeap () returned 0x3150000 [0060.024] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.025] GetProcessHeap () returned 0x3150000 [0060.025] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0060.025] GetProcessHeap () returned 0x3150000 [0060.026] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0060.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0060.026] GetProcessHeap () returned 0x3150000 [0060.026] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0060.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0060.027] GetProcessHeap () returned 0x3150000 [0060.027] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.027] GetProcessHeap () returned 0x3150000 [0060.027] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0060.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0060.029] GetProcessHeap () returned 0x3150000 [0060.029] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.029] GetProcessHeap () returned 0x3150000 [0060.030] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0060.030] GetProcessHeap () returned 0x3150000 [0060.030] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0060.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0060.033] GetProcessHeap () returned 0x3150000 [0060.033] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0060.033] GetProcessHeap () returned 0x3150000 [0060.033] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0060.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0060.035] GetProcessHeap () returned 0x3150000 [0060.035] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0060.036] GetProcessHeap () returned 0x3150000 [0060.036] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0060.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0060.037] GetProcessHeap () returned 0x3150000 [0060.037] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0060.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0060.043] GetProcessHeap () returned 0x3150000 [0060.043] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.043] GetProcessHeap () returned 0x3150000 [0060.043] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0060.044] GetProcessHeap () returned 0x3150000 [0060.044] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0060.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0060.251] GetProcessHeap () returned 0x3150000 [0060.251] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0060.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0060.251] GetProcessHeap () returned 0x3150000 [0060.251] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0060.252] GetProcessHeap () returned 0x3150000 [0060.252] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.252] GetProcessHeap () returned 0x3150000 [0060.252] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.253] GetProcessHeap () returned 0x3150000 [0060.253] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0060.254] GetProcessHeap () returned 0x3150000 [0060.254] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0060.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0060.255] GetProcessHeap () returned 0x3150000 [0060.255] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0060.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0060.259] GetProcessHeap () returned 0x3150000 [0060.259] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.259] GetProcessHeap () returned 0x3150000 [0060.259] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0060.260] GetProcessHeap () returned 0x3150000 [0060.260] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0060.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0060.262] GetProcessHeap () returned 0x3150000 [0060.262] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0060.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0060.267] GetProcessHeap () returned 0x3150000 [0060.267] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0060.267] GetProcessHeap () returned 0x3150000 [0060.267] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0060.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0060.268] GetProcessHeap () returned 0x3150000 [0060.268] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0060.268] GetProcessHeap () returned 0x3150000 [0060.268] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0060.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0060.271] GetProcessHeap () returned 0x3150000 [0060.271] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0060.271] GetProcessHeap () returned 0x3150000 [0060.271] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0060.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0060.271] GetProcessHeap () returned 0x3150000 [0060.271] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0060.271] GetProcessHeap () returned 0x3150000 [0060.271] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.272] GetProcessHeap () returned 0x3150000 [0060.272] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0060.272] GetProcessHeap () returned 0x3150000 [0060.272] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0060.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0060.275] GetProcessHeap () returned 0x3150000 [0060.275] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0060.275] GetProcessHeap () returned 0x3150000 [0060.275] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.276] GetProcessHeap () returned 0x3150000 [0060.276] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.276] GetProcessHeap () returned 0x3150000 [0060.276] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0060.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0060.276] GetProcessHeap () returned 0x3150000 [0060.276] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18a3b641, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0060.279] GetProcessHeap () returned 0x3150000 [0060.279] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.279] GetProcessHeap () returned 0x3150000 [0060.279] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0060.281] GetProcessHeap () returned 0x3150000 [0060.281] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.281] GetProcessHeap () returned 0x3150000 [0060.281] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0060.284] GetProcessHeap () returned 0x3150000 [0060.284] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.284] GetProcessHeap () returned 0x3150000 [0060.284] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.285] GetProcessHeap () returned 0x3150000 [0060.285] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0060.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0060.498] GetProcessHeap () returned 0x3150000 [0060.499] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.499] GetProcessHeap () returned 0x3150000 [0060.499] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0060.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0060.499] GetProcessHeap () returned 0x3150000 [0060.499] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0060.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0060.500] GetProcessHeap () returned 0x3150000 [0060.500] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0060.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0060.503] GetProcessHeap () returned 0x3150000 [0060.503] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0060.503] GetProcessHeap () returned 0x3150000 [0060.503] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0060.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0060.504] GetProcessHeap () returned 0x3150000 [0060.504] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0060.504] GetProcessHeap () returned 0x3150000 [0060.504] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0060.504] GetProcessHeap () returned 0x3150000 [0060.504] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.505] GetProcessHeap () returned 0x3150000 [0060.505] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0060.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0060.507] GetProcessHeap () returned 0x3150000 [0060.507] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.508] GetProcessHeap () returned 0x3150000 [0060.508] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0060.509] GetProcessHeap () returned 0x3150000 [0060.509] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0060.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0060.510] GetProcessHeap () returned 0x3150000 [0060.510] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0060.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0060.512] GetProcessHeap () returned 0x3150000 [0060.512] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.512] GetProcessHeap () returned 0x3150000 [0060.512] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0060.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0060.513] GetProcessHeap () returned 0x3150000 [0060.513] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0060.513] GetProcessHeap () returned 0x3150000 [0060.513] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0060.514] GetProcessHeap () returned 0x3150000 [0060.514] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0060.514] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0061.189] GetProcessHeap () returned 0x3150000 [0061.189] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.190] GetProcessHeap () returned 0x3150000 [0061.190] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b22ac67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0061.194] GetProcessHeap () returned 0x3150000 [0061.194] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.195] GetProcessHeap () returned 0x3150000 [0061.195] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b3a83c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0061.196] GetProcessHeap () returned 0x3150000 [0061.196] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0061.197] GetProcessHeap () returned 0x3150000 [0061.197] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.197] GetProcessHeap () returned 0x3150000 [0061.197] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0061.199] GetProcessHeap () returned 0x3150000 [0061.199] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.199] GetProcessHeap () returned 0x3150000 [0061.199] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0061.199] GetProcessHeap () returned 0x3150000 [0061.199] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.199] GetProcessHeap () returned 0x3150000 [0061.199] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0061.200] GetProcessHeap () returned 0x3150000 [0061.200] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.200] GetProcessHeap () returned 0x3150000 [0061.200] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0061.200] GetProcessHeap () returned 0x3150000 [0061.200] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.200] GetProcessHeap () returned 0x3150000 [0061.200] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0061.201] GetProcessHeap () returned 0x3150000 [0061.201] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.201] GetProcessHeap () returned 0x3150000 [0061.201] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0061.201] GetProcessHeap () returned 0x3150000 [0061.201] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.201] GetProcessHeap () returned 0x3150000 [0061.201] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0061.202] GetProcessHeap () returned 0x3150000 [0061.202] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.202] GetProcessHeap () returned 0x3150000 [0061.202] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0061.202] GetProcessHeap () returned 0x3150000 [0061.203] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.203] GetProcessHeap () returned 0x3150000 [0061.203] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0061.203] GetProcessHeap () returned 0x3150000 [0061.203] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.203] GetProcessHeap () returned 0x3150000 [0061.203] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0061.204] GetProcessHeap () returned 0x3150000 [0061.204] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.204] GetProcessHeap () returned 0x3150000 [0061.204] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0061.204] GetProcessHeap () returned 0x3150000 [0061.204] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.204] GetProcessHeap () returned 0x3150000 [0061.204] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0061.204] GetProcessHeap () returned 0x3150000 [0061.204] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.204] GetProcessHeap () returned 0x3150000 [0061.204] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0061.205] GetProcessHeap () returned 0x3150000 [0061.205] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.205] GetProcessHeap () returned 0x3150000 [0061.205] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0061.206] GetProcessHeap () returned 0x3150000 [0061.206] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.206] GetProcessHeap () returned 0x3150000 [0061.206] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0061.206] GetProcessHeap () returned 0x3150000 [0061.206] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.207] GetProcessHeap () returned 0x3150000 [0061.207] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0061.207] GetProcessHeap () returned 0x3150000 [0061.207] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.207] GetProcessHeap () returned 0x3150000 [0061.207] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0061.207] GetProcessHeap () returned 0x3150000 [0061.207] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.208] GetProcessHeap () returned 0x3150000 [0061.208] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0061.208] GetProcessHeap () returned 0x3150000 [0061.208] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.208] GetProcessHeap () returned 0x3150000 [0061.208] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0061.209] GetProcessHeap () returned 0x3150000 [0061.209] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.209] GetProcessHeap () returned 0x3150000 [0061.209] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0061.209] GetProcessHeap () returned 0x3150000 [0061.209] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.209] GetProcessHeap () returned 0x3150000 [0061.209] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0061.210] GetProcessHeap () returned 0x3150000 [0061.210] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.210] GetProcessHeap () returned 0x3150000 [0061.210] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0061.210] GetProcessHeap () returned 0x3150000 [0061.210] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.210] GetProcessHeap () returned 0x3150000 [0061.210] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0061.210] GetProcessHeap () returned 0x3150000 [0061.210] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.210] GetProcessHeap () returned 0x3150000 [0061.210] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.210] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0061.211] GetProcessHeap () returned 0x3150000 [0061.211] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.211] GetProcessHeap () returned 0x3150000 [0061.211] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0061.212] GetProcessHeap () returned 0x3150000 [0061.212] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.212] GetProcessHeap () returned 0x3150000 [0061.212] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0061.213] GetProcessHeap () returned 0x3150000 [0061.213] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.213] GetProcessHeap () returned 0x3150000 [0061.213] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.213] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0061.214] GetProcessHeap () returned 0x3150000 [0061.214] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.214] GetProcessHeap () returned 0x3150000 [0061.214] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0061.215] GetProcessHeap () returned 0x3150000 [0061.215] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.215] GetProcessHeap () returned 0x3150000 [0061.215] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0061.215] GetProcessHeap () returned 0x3150000 [0061.216] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.216] GetProcessHeap () returned 0x3150000 [0061.216] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0061.216] GetProcessHeap () returned 0x3150000 [0061.216] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.216] GetProcessHeap () returned 0x3150000 [0061.216] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0061.216] GetProcessHeap () returned 0x3150000 [0061.216] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.216] GetProcessHeap () returned 0x3150000 [0061.216] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0061.217] GetProcessHeap () returned 0x3150000 [0061.217] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.217] GetProcessHeap () returned 0x3150000 [0061.217] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0061.217] GetProcessHeap () returned 0x3150000 [0061.217] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.217] GetProcessHeap () returned 0x3150000 [0061.217] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0061.217] GetProcessHeap () returned 0x3150000 [0061.217] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.217] GetProcessHeap () returned 0x3150000 [0061.217] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0061.217] GetProcessHeap () returned 0x3150000 [0061.218] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.218] GetProcessHeap () returned 0x3150000 [0061.218] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0061.218] GetProcessHeap () returned 0x3150000 [0061.218] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.218] GetProcessHeap () returned 0x3150000 [0061.218] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0061.219] GetProcessHeap () returned 0x3150000 [0061.219] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.219] GetProcessHeap () returned 0x3150000 [0061.219] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0061.219] GetProcessHeap () returned 0x3150000 [0061.219] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.219] GetProcessHeap () returned 0x3150000 [0061.219] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0061.220] GetProcessHeap () returned 0x3150000 [0061.220] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.220] GetProcessHeap () returned 0x3150000 [0061.220] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0061.220] GetProcessHeap () returned 0x3150000 [0061.220] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.220] GetProcessHeap () returned 0x3150000 [0061.220] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0061.220] GetProcessHeap () returned 0x3150000 [0061.220] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.221] GetProcessHeap () returned 0x3150000 [0061.221] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0061.221] GetProcessHeap () returned 0x3150000 [0061.221] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.221] GetProcessHeap () returned 0x3150000 [0061.221] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.221] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0061.222] GetProcessHeap () returned 0x3150000 [0061.222] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.222] GetProcessHeap () returned 0x3150000 [0061.222] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0061.222] GetProcessHeap () returned 0x3150000 [0061.222] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.222] GetProcessHeap () returned 0x3150000 [0061.222] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.225] GetProcessHeap () returned 0x3150000 [0061.225] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0061.227] GetProcessHeap () returned 0x3150000 [0061.227] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.228] GetProcessHeap () returned 0x3150000 [0061.228] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0061.478] GetProcessHeap () returned 0x3150000 [0061.478] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.478] GetProcessHeap () returned 0x3150000 [0061.478] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0061.482] GetProcessHeap () returned 0x3150000 [0061.482] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.482] GetProcessHeap () returned 0x3150000 [0061.482] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0061.484] GetProcessHeap () returned 0x3150000 [0061.484] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0061.485] GetProcessHeap () returned 0x3150000 [0061.485] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.485] GetProcessHeap () returned 0x3150000 [0061.485] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0061.485] GetProcessHeap () returned 0x3150000 [0061.485] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.485] GetProcessHeap () returned 0x3150000 [0061.486] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0061.486] GetProcessHeap () returned 0x3150000 [0061.486] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.486] GetProcessHeap () returned 0x3150000 [0061.486] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.487] GetProcessHeap () returned 0x3150000 [0061.487] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0061.490] GetProcessHeap () returned 0x3150000 [0061.490] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.490] GetProcessHeap () returned 0x3150000 [0061.490] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0061.497] GetProcessHeap () returned 0x3150000 [0061.497] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.497] GetProcessHeap () returned 0x3150000 [0061.497] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.497] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0061.497] GetProcessHeap () returned 0x3150000 [0061.497] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.497] GetProcessHeap () returned 0x3150000 [0061.497] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.497] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0061.498] GetProcessHeap () returned 0x3150000 [0061.498] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.498] GetProcessHeap () returned 0x3150000 [0061.498] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0061.498] GetProcessHeap () returned 0x3150000 [0061.498] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.499] GetProcessHeap () returned 0x3150000 [0061.499] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xa326fd, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0061.500] GetProcessHeap () returned 0x3150000 [0061.500] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0061.709] GetProcessHeap () returned 0x3150000 [0061.709] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0061.709] GetProcessHeap () returned 0x3150000 [0061.709] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.710] GetProcessHeap () returned 0x3150000 [0061.710] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0061.712] GetProcessHeap () returned 0x3150000 [0061.712] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.712] GetProcessHeap () returned 0x3150000 [0061.712] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0061.713] GetProcessHeap () returned 0x3150000 [0061.713] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0061.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\rsod\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0061.718] GetProcessHeap () returned 0x3150000 [0061.718] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0061.718] GetProcessHeap () returned 0x3150000 [0061.718] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0061.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0061.719] GetProcessHeap () returned 0x3150000 [0061.719] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0061.722] GetProcessHeap () returned 0x3150000 [0061.722] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0061.722] GetProcessHeap () returned 0x3150000 [0061.722] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0061.723] GetProcessHeap () returned 0x3150000 [0061.723] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0061.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0061.724] GetProcessHeap () returned 0x3150000 [0061.724] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0061.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0061.727] GetProcessHeap () returned 0x3150000 [0061.727] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0061.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0061.728] GetProcessHeap () returned 0x3150000 [0061.728] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0061.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0062.227] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.227] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Address.accft", cAlternateFileName="ADDRES~1.ACC")) returned 1 [0062.227] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xefe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Category.accft", cAlternateFileName="CATEGO~1.ACC")) returned 1 [0062.227] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Name.accft", cAlternateFileName="NAME~1.ACC")) returned 1 [0062.227] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Payment Type.accft", cAlternateFileName="PAYMEN~1.ACC")) returned 1 [0062.227] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phone.accft", cAlternateFileName="PHONE~1.ACC")) returned 1 [0062.227] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Priority.accft", cAlternateFileName="PRIORI~1.ACC")) returned 1 [0062.228] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start End Dates.accft", cAlternateFileName="STARTE~1.ACC")) returned 1 [0062.228] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status.accft", cAlternateFileName="STATUS~1.ACC")) returned 1 [0062.228] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 1 [0062.228] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 0 [0062.228] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0062.229] GetProcessHeap () returned 0x3150000 [0062.229] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0062.229] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1 [0062.229] GetProcessHeap () returned 0x3150000 [0062.229] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0062.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0062.231] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.231] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5707, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Right.accdt", cAlternateFileName="1RIGHT~1.ACC")) returned 1 [0062.231] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5644, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Top.accdt", cAlternateFileName="1TOP~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Right.accdt", cAlternateFileName="2RIGHT~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Top.accdt", cAlternateFileName="2TOP~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.accdt", cAlternateFileName="COMMEN~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Details.accdt", cAlternateFileName="DETAIL~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.accdt", cAlternateFileName="DIALOG~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.accdt", cAlternateFileName="LIST~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6a2342, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x482a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media.accdt", cAlternateFileName="MEDIA~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Msgbox.accdt", cAlternateFileName="MSGBOX~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x550d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tabs.accdt", cAlternateFileName="TABS~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9cfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 1 [0062.232] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 0 [0062.233] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0062.233] GetProcessHeap () returned 0x3150000 [0062.233] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0062.233] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 0 [0062.233] FindClose (in: hFindFile=0x57d1e38 | out: hFindFile=0x57d1e38) returned 1 [0062.233] GetProcessHeap () returned 0x3150000 [0062.233] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36f5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyReport.dotx", cAlternateFileName="ADJACE~2.DOT")) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6a2342, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyResume.dotx", cAlternateFileName="ADJACE~3.DOT")) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR1.XLT", cAlternateFileName="")) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR10.XLT", cAlternateFileName="")) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR2.XLT", cAlternateFileName="")) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR3.XLT", cAlternateFileName="")) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR4.XLT", cAlternateFileName="")) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR5.XLT", cAlternateFileName="")) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR6.XLT", cAlternateFileName="")) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR7.XLT", cAlternateFileName="")) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR8.XLT", cAlternateFileName="")) returned 1 [0062.235] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR9.XLT", cAlternateFileName="")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryLetter.dotx", cAlternateFileName="APOTHE~1.DOT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryNewsletter.dotx", cAlternateFileName="APOTHE~3.DOT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36007, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryResume.dotx", cAlternateFileName="APOTHE~2.DOT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BillingStatement.xltx", cAlternateFileName="BILLIN~1.XLT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blog.dotx", cAlternateFileName="BLOG~1.DOT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BloodPressureTracker.xltx", cAlternateFileName="BLOODP~1.XLT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChronologicalLetter.dotx", cAlternateFileName="CHRONO~1.DOT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11aa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChronologicalResume.dotx", cAlternateFileName="CHRONO~2.DOT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb714a07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x125418, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClassicPhotoAlbum.potx", cAlternateFileName="CLASSI~1.POT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContemporaryPhotoAlbum.potx", cAlternateFileName="CONTEM~1.POT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e536, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialLetter.dotx", cAlternateFileName="ESSENT~3.DOT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb73ac78, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb73ac78, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbafe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialReport.dotx", cAlternateFileName="ESSENT~2.DOT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb73ac78, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb73ac78, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7ad38b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4593e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialResume.dotx", cAlternateFileName="ESSENT~1.DOT")) returned 1 [0062.236] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExpenseReport.xltx", cAlternateFileName="EXPENS~1.XLT")) returned 1 [0062.237] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GettingStarted16", cAlternateFileName="GETTIN~1")) returned 1 [0062.237] GetProcessHeap () returned 0x3150000 [0062.237] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0062.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0062.241] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.241] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.241] FindClose (in: hFindFile=0x57d20b8 | out: hFindFile=0x57d20b8) returned 1 [0062.241] GetProcessHeap () returned 0x3150000 [0062.241] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0062.241] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoanAmortization.xltx", cAlternateFileName="LOANAM~1.XLT")) returned 1 [0062.241] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIL.OFT", cAlternateFileName="")) returned 1 [0062.241] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Word 2003 Look.dotx", cAlternateFileName="OFFICE~1.DOT")) returned 1 [0062.242] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE", cAlternateFileName="")) returned 1 [0062.242] GetProcessHeap () returned 0x3150000 [0062.242] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0062.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0062.243] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.243] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0062.243] GetProcessHeap () returned 0x3150000 [0062.243] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0062.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0062.244] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.244] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook Templates", cAlternateFileName="NOTEBO~1")) returned 1 [0062.245] GetProcessHeap () returned 0x3150000 [0062.245] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0062.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0062.245] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.245] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x490b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 1 [0062.245] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x490b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 0 [0062.245] FindClose (in: hFindFile=0x57d2178 | out: hFindFile=0x57d2178) returned 1 [0062.246] GetProcessHeap () returned 0x3150000 [0062.246] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0062.246] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0062.246] GetProcessHeap () returned 0x3150000 [0062.246] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0062.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0062.246] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.246] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACADEMIC.ONE", cAlternateFileName="")) returned 1 [0062.246] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b428, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLANK.ONE", cAlternateFileName="")) returned 1 [0062.246] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7d35ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e630, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUSINESS.ONE", cAlternateFileName="")) returned 1 [0062.246] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7ad38b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3182e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER.ONE", cAlternateFileName="")) returned 1 [0062.246] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 1 [0062.246] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 0 [0062.246] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0062.246] GetProcessHeap () returned 0x3150000 [0062.246] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0062.247] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 0 [0062.247] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0062.247] GetProcessHeap () returned 0x3150000 [0062.247] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.248] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0062.248] FindClose (in: hFindFile=0x57d20b8 | out: hFindFile=0x57d20b8) returned 1 [0062.248] GetProcessHeap () returned 0x3150000 [0062.248] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0062.248] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1db9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1 [0062.248] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59f49, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginReport.Dotx", cAlternateFileName="ORIGIN~2.DOT")) returned 1 [0062.248] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7f98f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21aa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginResume.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1 [0062.248] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalMonthlyBudget.xltx", cAlternateFileName="PERSON~1.XLT")) returned 1 [0062.248] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7f98f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitchbook.potx", cAlternateFileName="PITCHB~1.POT")) returned 1 [0062.248] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJPLAN.XLTX", cAlternateFileName="PROJPL~1.XLT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17697, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuizShow.potx", cAlternateFileName="QUIZSH~1.POT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb86bf6b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb86bf6b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcdbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedAndBlackLetter.dotx", cAlternateFileName="REDAND~2.DOT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b56a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedAndBlackReport.dotx", cAlternateFileName="REDAND~1.DOT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb845d09, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb845d09, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb86bf6b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="SalesReport.xltx", cAlternateFileName="SALESR~1.XLT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc51, dwReserved0=0x0, dwReserved1=0x0, cFileName="StudentReport.dotx", cAlternateFileName="STUDEN~1.DOT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c2c3dcb, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x2aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKLIST.XLTX", cAlternateFileName="TASKLI~1.XLT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimeCard.xltx", cAlternateFileName="TIMECA~1.XLT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf18, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimelessLetter.dotx", cAlternateFileName="TIMELE~2.DOT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43753, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimelessReport.dotx", cAlternateFileName="TIMELE~3.DOT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe72, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimelessResume.dotx", cAlternateFileName="TIMELE~1.DOT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Training.potx", cAlternateFileName="TRAINI~1.POT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="WIDESC~1.POT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2010 look.dotx", cAlternateFileName="WORD20~1.DOT")) returned 1 [0062.249] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2010 look.dotx", cAlternateFileName="WORD20~1.DOT")) returned 0 [0062.250] FindClose (in: hFindFile=0x57d1c78 | out: hFindFile=0x57d1c78) returned 1 [0062.250] GetProcessHeap () returned 0x3150000 [0062.250] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.251] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1 [0062.251] GetProcessHeap () returned 0x3150000 [0062.251] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0062.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0062.253] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.253] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 1 [0062.253] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 0 [0062.253] FindClose (in: hFindFile=0x57d20b8 | out: hFindFile=0x57d20b8) returned 1 [0062.253] GetProcessHeap () returned 0x3150000 [0062.253] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0062.253] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0 [0062.253] FindClose (in: hFindFile=0x57d20f8 | out: hFindFile=0x57d20f8) returned 1 [0062.253] GetProcessHeap () returned 0x3150000 [0062.253] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0062.254] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0062.254] GetProcessHeap () returned 0x3150000 [0062.254] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0062.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0062.254] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.255] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Common AppData", cAlternateFileName="COMMON~2")) returned 1 [0062.255] GetProcessHeap () returned 0x3150000 [0062.255] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0062.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0062.256] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.256] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~2")) returned 1 [0062.256] GetProcessHeap () returned 0x3150000 [0062.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0062.257] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.258] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1 [0062.258] GetProcessHeap () returned 0x3150000 [0062.258] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0062.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0062.259] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.259] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0062.259] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0062.259] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heartbeat", cAlternateFileName="HEARTB~1")) returned 1 [0062.259] GetProcessHeap () returned 0x3150000 [0062.259] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0062.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0062.260] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.260] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.260] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0062.260] GetProcessHeap () returned 0x3150000 [0062.260] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0062.260] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0062.260] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0062.260] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0062.260] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0062.260] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 0 [0062.260] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0062.260] GetProcessHeap () returned 0x3150000 [0062.260] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.261] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1 [0062.261] GetProcessHeap () returned 0x3150000 [0062.261] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0062.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0062.559] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.559] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0062.559] FindClose (in: hFindFile=0x57d22b8 | out: hFindFile=0x57d22b8) returned 1 [0062.559] GetProcessHeap () returned 0x3150000 [0062.559] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.559] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 0 [0062.559] FindClose (in: hFindFile=0x57d2178 | out: hFindFile=0x57d2178) returned 1 [0062.560] GetProcessHeap () returned 0x3150000 [0062.560] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.560] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 1 [0062.561] GetProcessHeap () returned 0x3150000 [0062.561] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0062.563] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45c4958, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x232, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.DATABASECOMPARE.16.1033.hxn", cAlternateFileName="MSDATA~1.HXN")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf455209f, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.16.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4315e64, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.16.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf455209f, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.16.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC.16.1033.hxn", cAlternateFileName="MSLYNC~1.HXN")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x178, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_BASIC.16.1033.hxn", cAlternateFileName="MSLYNC~2.HXN")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.LYNC_ONLINE.16.1033.hxn", cAlternateFileName="MSLYNC~3.HXN")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4610c9d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.16.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4315e64, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.16.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3f5c319, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.16.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42efb5b, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.16.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf401af21, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.16.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0062.564] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3f825df, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.16.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4315e64, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.16.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB.16.1033.hxn", cAlternateFileName="MSSKYP~1.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_BASIC.16.1033.hxn", cAlternateFileName="MSSKYP~2.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINE.16.1033.hxn", cAlternateFileName="MSSKYP~3.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINEG.16.1033.hxn", cAlternateFileName="MSSKYP~4.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45c4958, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SPREADSHEETCOMPARE.16.1033.hxn", cAlternateFileName="MSSPRE~1.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xf3e9d89c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.16.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xf3e9d89c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.16.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xf3e9d89c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.16.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x3b809370, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.16.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x3b809370, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ_STD.16.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3e2b07e, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.16.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3b85588b, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0062.565] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3b85588b, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0062.566] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0062.566] GetProcessHeap () returned 0x3150000 [0062.566] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.566] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 0 [0062.566] FindClose (in: hFindFile=0x57d20f8 | out: hFindFile=0x57d20f8) returned 1 [0062.566] GetProcessHeap () returned 0x3150000 [0062.567] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0062.568] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Common Programs", cAlternateFileName="COMMON~1")) returned 1 [0062.568] GetProcessHeap () returned 0x3150000 [0062.568] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0062.568] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0062.569] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.569] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245644bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245644bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access 2016.lnk", cAlternateFileName="ACCESS~1.LNK")) returned 1 [0062.569] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245644bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245644bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel 2016.lnk", cAlternateFileName="EXCEL2~1.LNK")) returned 1 [0062.569] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 2016 Tools", cAlternateFileName="MICROS~1")) returned 1 [0062.569] GetProcessHeap () returned 0x3150000 [0062.569] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0062.573] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.574] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database Compare 2016.lnk", cAlternateFileName="DATABA~1.LNK")) returned 1 [0062.574] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2016 Language Preferences.lnk", cAlternateFileName="OFFICE~1.LNK")) returned 1 [0062.574] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2016 Upload Center.lnk", cAlternateFileName="OFFICE~2.LNK")) returned 1 [0062.574] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project Server 2016 Accounts.lnk", cAlternateFileName="PROJEC~1.LNK")) returned 1 [0062.574] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype for Business Recording Manager.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 1 [0062.574] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spreadsheet Compare 2016.lnk", cAlternateFileName="SPREAD~1.LNK")) returned 1 [0062.574] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x730, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry Dashboard for Office 2016.lnk", cAlternateFileName="TELEME~1.LNK")) returned 1 [0062.574] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry Log for Office 2016.lnk", cAlternateFileName="TELEME~2.LNK")) returned 1 [0062.574] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry Log for Office 2016.lnk", cAlternateFileName="TELEME~2.LNK")) returned 0 [0062.574] FindClose (in: hFindFile=0x57d1c78 | out: hFindFile=0x57d1c78) returned 1 [0062.575] GetProcessHeap () returned 0x3150000 [0062.575] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.575] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 1 [0062.575] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2466f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2466f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2466f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote 2016.lnk", cAlternateFileName="ONENOT~1.LNK")) returned 1 [0062.575] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2466f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2466f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24695725, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook 2016.lnk", cAlternateFileName="OUTLOO~1.LNK")) returned 1 [0062.575] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint 2016.lnk", cAlternateFileName="POWERP~1.LNK")) returned 1 [0062.576] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x6ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project 2016.lnk", cAlternateFileName="PROJEC~1.LNK")) returned 1 [0062.576] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher 2016.lnk", cAlternateFileName="PUBLIS~1.LNK")) returned 1 [0062.576] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x703, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype for Business 2016.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 1 [0062.576] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5277b31, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5277b31, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio 2016.lnk", cAlternateFileName="VISIO2~1.LNK")) returned 1 [0062.576] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 1 [0062.576] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 0 [0062.576] FindClose (in: hFindFile=0x57d20f8 | out: hFindFile=0x57d20f8) returned 1 [0062.576] GetProcessHeap () returned 0x3150000 [0062.576] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0062.577] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0062.578] GetProcessHeap () returned 0x3150000 [0062.578] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0062.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0062.578] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.578] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="private", cAlternateFileName="")) returned 1 [0062.578] GetProcessHeap () returned 0x3150000 [0062.578] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0062.582] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868d297b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xecf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGENCYB.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a9c5a1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe628, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGENCYR.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12b2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ALGER.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24dd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANTQUAB.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANTQUABI.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24664, dwReserved0=0x0, dwReserved1=0x0, cFileName="ANTQUAI.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2af54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARIALN.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a9c5a1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c204, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARIALNB.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bf74, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARIALNBI.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c384, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARIALNI.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb0cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARLRDBD.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd6c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASKVILL.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BAUHS93.TTF", cAlternateFileName="")) returned 1 [0062.584] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="BELL.TTF", cAlternateFileName="")) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14294, dwReserved0=0x0, dwReserved1=0x0, cFileName="BELLB.TTF", cAlternateFileName="")) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86d24d65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14110, dwReserved0=0x0, dwReserved1=0x0, cFileName="BELLI.TTF", cAlternateFileName="")) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BERNHC.TTF", cAlternateFileName="")) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25f88, dwReserved0=0x0, dwReserved1=0x0, cFileName="BKANT.TTF", cAlternateFileName="")) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x122c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_B.TTF", cAlternateFileName="")) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_BI.TTF", cAlternateFileName="")) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14768, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_BLAI.TTF", cAlternateFileName="")) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_BLAR.TTF", cAlternateFileName="")) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1216c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_CB.TTF", cAlternateFileName="")) returned 1 [0062.585] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_CBI.TTF", cAlternateFileName="")) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_CI.TTF", cAlternateFileName="")) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8875ec88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_CR.TTF", cAlternateFileName="")) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_I.TTF", cAlternateFileName="")) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x165c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_PSTC.TTF", cAlternateFileName="")) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8875ec88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOD_R.TTF", cAlternateFileName="")) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8875ec88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x274ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOKOS.TTF", cAlternateFileName="")) returned 1 [0062.586] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25bd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOKOSB.TTF", cAlternateFileName="")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOKOSBI.TTF", cAlternateFileName="")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x883a5225, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x274fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOKOSI.TTF", cAlternateFileName="")) returned 1 [0062.587] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRADHITC.TTF", cAlternateFileName="")) returned 1 [0062.588] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRITANIC.TTF", cAlternateFileName="")) returned 1 [0062.588] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRLNSB.TTF", cAlternateFileName="")) returned 1 [0062.588] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87a8e187, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRLNSDB.TTF", cAlternateFileName="")) returned 1 [0062.588] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87910bb6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17c04, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRLNSR.TTF", cAlternateFileName="")) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87910bb6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xebd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BROADW.TTF", cAlternateFileName="")) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87910bb6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRUSHSCI.TTF", cAlternateFileName="")) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSSYM7.TTF", cAlternateFileName="")) returned 1 [0062.589] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb91b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalibriL.ttf", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd4070, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalibriLI.ttf", cAlternateFileName="CALIBR~1.TTF")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13aec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALIFB.TTF", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x181bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALIFI.TTF", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALIFR.TTF", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13914, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALIST.TTF", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALISTB.TTF", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14be0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALISTBI.TTF", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALISTI.TTF", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CASTELAR.TTF", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENSCBK.TTF", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14348, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTAUR.TTF", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28580, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTURY.TTF", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x178c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHILLER.TTF", cAlternateFileName="")) returned 1 [0062.590] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd6a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="COLONNA.TTF", cAlternateFileName="")) returned 1 [0062.591] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a04, dwReserved0=0x0, dwReserved1=0x0, cFileName="COOPBL.TTF", cAlternateFileName="")) returned 1 [0062.591] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf070, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPRGTB.TTF", cAlternateFileName="")) returned 1 [0062.591] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf4fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPRGTL.TTF", cAlternateFileName="")) returned 1 [0062.591] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURLZ___.TTF", cAlternateFileName="")) returned 1 [0062.591] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc9c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEPHNT.TTF", cAlternateFileName="")) returned 1 [0062.591] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd434, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELEPHNTI.TTF", cAlternateFileName="")) returned 1 [0062.606] GetProcessHeap () returned 0x3150000 [0062.606] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.606] GetProcessHeap () returned 0x3150000 [0062.606] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0062.607] GetProcessHeap () returned 0x3150000 [0062.607] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0062.608] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0062.608] GetProcessHeap () returned 0x3150000 [0062.608] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb975fdf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0062.760] GetProcessHeap () returned 0x3150000 [0062.760] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.761] GetProcessHeap () returned 0x3150000 [0062.761] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0062.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0062.762] GetProcessHeap () returned 0x3150000 [0062.762] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0062.764] GetProcessHeap () returned 0x3150000 [0062.764] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0062.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf47e9c8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0062.764] GetProcessHeap () returned 0x3150000 [0062.764] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.764] GetProcessHeap () returned 0x3150000 [0062.764] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.765] GetProcessHeap () returned 0x3150000 [0062.765] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0062.767] GetProcessHeap () returned 0x3150000 [0062.767] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0062.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0062.768] GetProcessHeap () returned 0x3150000 [0062.768] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.768] GetProcessHeap () returned 0x3150000 [0062.768] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.769] GetProcessHeap () returned 0x3150000 [0062.769] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0062.770] GetProcessHeap () returned 0x3150000 [0062.770] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.770] GetProcessHeap () returned 0x3150000 [0062.770] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0062.771] GetProcessHeap () returned 0x3150000 [0062.771] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.771] GetProcessHeap () returned 0x3150000 [0062.771] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0062.774] GetProcessHeap () returned 0x3150000 [0062.774] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.774] GetProcessHeap () returned 0x3150000 [0062.774] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0062.776] GetProcessHeap () returned 0x3150000 [0062.776] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.776] GetProcessHeap () returned 0x3150000 [0062.776] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0062.777] GetProcessHeap () returned 0x3150000 [0062.777] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.777] GetProcessHeap () returned 0x3150000 [0062.777] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0062.777] GetProcessHeap () returned 0x3150000 [0062.777] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0062.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0062.779] GetProcessHeap () returned 0x3150000 [0062.779] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.779] GetProcessHeap () returned 0x3150000 [0062.779] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0062.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc461cf97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0062.779] GetProcessHeap () returned 0x3150000 [0062.779] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.779] GetProcessHeap () returned 0x3150000 [0062.779] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0062.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0062.780] GetProcessHeap () returned 0x3150000 [0062.780] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0062.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0062.782] GetProcessHeap () returned 0x3150000 [0062.782] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0062.782] GetProcessHeap () returned 0x3150000 [0062.782] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57a1bf0 [0062.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0062.783] GetProcessHeap () returned 0x3150000 [0062.783] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0062.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0062.783] GetProcessHeap () returned 0x3150000 [0062.783] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0062.783] GetProcessHeap () returned 0x3150000 [0062.783] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57a1bf0 | out: hHeap=0x3150000) returned 1 [0062.784] GetProcessHeap () returned 0x3150000 [0062.784] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.785] GetProcessHeap () returned 0x3150000 [0062.785] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0062.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0062.792] GetProcessHeap () returned 0x3150000 [0062.792] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.792] GetProcessHeap () returned 0x3150000 [0062.792] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0062.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0062.793] GetProcessHeap () returned 0x3150000 [0062.793] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0062.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0062.793] GetProcessHeap () returned 0x3150000 [0062.793] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0062.793] GetProcessHeap () returned 0x3150000 [0062.793] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.794] GetProcessHeap () returned 0x3150000 [0062.794] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.794] GetProcessHeap () returned 0x3150000 [0062.794] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0062.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0062.795] GetProcessHeap () returned 0x3150000 [0062.795] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0062.795] GetProcessHeap () returned 0x3150000 [0062.795] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0062.795] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0062.797] GetProcessHeap () returned 0x3150000 [0062.797] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0062.797] GetProcessHeap () returned 0x3150000 [0062.797] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.797] GetProcessHeap () returned 0x3150000 [0062.797] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5781be0 [0062.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0062.798] GetProcessHeap () returned 0x3150000 [0062.798] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0062.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0062.798] GetProcessHeap () returned 0x3150000 [0062.798] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0062.798] GetProcessHeap () returned 0x3150000 [0062.798] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5781be0 | out: hHeap=0x3150000) returned 1 [0062.799] GetProcessHeap () returned 0x3150000 [0062.799] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0062.799] GetProcessHeap () returned 0x3150000 [0062.799] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0062.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0062.799] GetProcessHeap () returned 0x3150000 [0062.799] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0062.799] GetProcessHeap () returned 0x3150000 [0062.799] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0062.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0062.800] GetProcessHeap () returned 0x3150000 [0062.800] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0062.800] GetProcessHeap () returned 0x3150000 [0062.800] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0062.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0063.006] GetProcessHeap () returned 0x3150000 [0063.006] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.006] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0063.007] GetProcessHeap () returned 0x3150000 [0063.007] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.007] GetProcessHeap () returned 0x3150000 [0063.007] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0063.007] GetProcessHeap () returned 0x3150000 [0063.007] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.007] GetProcessHeap () returned 0x3150000 [0063.007] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0063.008] GetProcessHeap () returned 0x3150000 [0063.008] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.008] GetProcessHeap () returned 0x3150000 [0063.008] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0063.008] GetProcessHeap () returned 0x3150000 [0063.008] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.008] GetProcessHeap () returned 0x3150000 [0063.008] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0063.009] GetProcessHeap () returned 0x3150000 [0063.009] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.009] GetProcessHeap () returned 0x3150000 [0063.009] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0063.010] GetProcessHeap () returned 0x3150000 [0063.010] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.010] GetProcessHeap () returned 0x3150000 [0063.010] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0063.011] GetProcessHeap () returned 0x3150000 [0063.011] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.011] GetProcessHeap () returned 0x3150000 [0063.011] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0063.011] GetProcessHeap () returned 0x3150000 [0063.011] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.011] GetProcessHeap () returned 0x3150000 [0063.011] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0063.012] GetProcessHeap () returned 0x3150000 [0063.012] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.012] GetProcessHeap () returned 0x3150000 [0063.012] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0063.013] GetProcessHeap () returned 0x3150000 [0063.013] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.013] GetProcessHeap () returned 0x3150000 [0063.013] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0063.013] GetProcessHeap () returned 0x3150000 [0063.013] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.013] GetProcessHeap () returned 0x3150000 [0063.013] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0063.014] GetProcessHeap () returned 0x3150000 [0063.014] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.014] GetProcessHeap () returned 0x3150000 [0063.014] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0063.015] GetProcessHeap () returned 0x3150000 [0063.015] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.015] GetProcessHeap () returned 0x3150000 [0063.015] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0063.016] GetProcessHeap () returned 0x3150000 [0063.016] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.016] GetProcessHeap () returned 0x3150000 [0063.016] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0063.016] GetProcessHeap () returned 0x3150000 [0063.016] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.016] GetProcessHeap () returned 0x3150000 [0063.016] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0063.017] GetProcessHeap () returned 0x3150000 [0063.017] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.017] GetProcessHeap () returned 0x3150000 [0063.017] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0063.018] GetProcessHeap () returned 0x3150000 [0063.018] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.018] GetProcessHeap () returned 0x3150000 [0063.018] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0063.018] GetProcessHeap () returned 0x3150000 [0063.018] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.018] GetProcessHeap () returned 0x3150000 [0063.018] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0063.019] GetProcessHeap () returned 0x3150000 [0063.019] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.019] GetProcessHeap () returned 0x3150000 [0063.019] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0063.020] GetProcessHeap () returned 0x3150000 [0063.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.020] GetProcessHeap () returned 0x3150000 [0063.020] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0063.020] GetProcessHeap () returned 0x3150000 [0063.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.021] GetProcessHeap () returned 0x3150000 [0063.021] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0063.022] GetProcessHeap () returned 0x3150000 [0063.022] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.022] GetProcessHeap () returned 0x3150000 [0063.022] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0063.022] GetProcessHeap () returned 0x3150000 [0063.022] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.022] GetProcessHeap () returned 0x3150000 [0063.022] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0063.023] GetProcessHeap () returned 0x3150000 [0063.023] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.023] GetProcessHeap () returned 0x3150000 [0063.023] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0063.023] GetProcessHeap () returned 0x3150000 [0063.023] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.023] GetProcessHeap () returned 0x3150000 [0063.023] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0063.024] GetProcessHeap () returned 0x3150000 [0063.024] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.024] GetProcessHeap () returned 0x3150000 [0063.024] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0063.025] GetProcessHeap () returned 0x3150000 [0063.025] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.025] GetProcessHeap () returned 0x3150000 [0063.025] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0063.025] GetProcessHeap () returned 0x3150000 [0063.025] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.025] GetProcessHeap () returned 0x3150000 [0063.025] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0063.026] GetProcessHeap () returned 0x3150000 [0063.026] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.026] GetProcessHeap () returned 0x3150000 [0063.026] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0063.026] GetProcessHeap () returned 0x3150000 [0063.026] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.026] GetProcessHeap () returned 0x3150000 [0063.026] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0063.027] GetProcessHeap () returned 0x3150000 [0063.028] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.028] GetProcessHeap () returned 0x3150000 [0063.028] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0063.028] GetProcessHeap () returned 0x3150000 [0063.028] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.028] GetProcessHeap () returned 0x3150000 [0063.028] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.028] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0063.029] GetProcessHeap () returned 0x3150000 [0063.029] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.029] GetProcessHeap () returned 0x3150000 [0063.029] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0063.030] GetProcessHeap () returned 0x3150000 [0063.030] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.030] GetProcessHeap () returned 0x3150000 [0063.030] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0063.031] GetProcessHeap () returned 0x3150000 [0063.031] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.031] GetProcessHeap () returned 0x3150000 [0063.031] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0063.032] GetProcessHeap () returned 0x3150000 [0063.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.032] GetProcessHeap () returned 0x3150000 [0063.032] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0063.032] GetProcessHeap () returned 0x3150000 [0063.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.033] GetProcessHeap () returned 0x3150000 [0063.033] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0063.034] GetProcessHeap () returned 0x3150000 [0063.034] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.034] GetProcessHeap () returned 0x3150000 [0063.034] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0063.035] GetProcessHeap () returned 0x3150000 [0063.035] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.035] GetProcessHeap () returned 0x3150000 [0063.035] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0063.036] GetProcessHeap () returned 0x3150000 [0063.036] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.036] GetProcessHeap () returned 0x3150000 [0063.036] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0063.037] GetProcessHeap () returned 0x3150000 [0063.037] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.037] GetProcessHeap () returned 0x3150000 [0063.037] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0063.037] GetProcessHeap () returned 0x3150000 [0063.037] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.038] GetProcessHeap () returned 0x3150000 [0063.038] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0063.038] GetProcessHeap () returned 0x3150000 [0063.038] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.038] GetProcessHeap () returned 0x3150000 [0063.038] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0063.039] GetProcessHeap () returned 0x3150000 [0063.039] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.039] GetProcessHeap () returned 0x3150000 [0063.039] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0063.039] GetProcessHeap () returned 0x3150000 [0063.039] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.039] GetProcessHeap () returned 0x3150000 [0063.039] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0063.040] GetProcessHeap () returned 0x3150000 [0063.040] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0063.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0063.042] GetProcessHeap () returned 0x3150000 [0063.042] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc85db99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc85db99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0063.043] GetProcessHeap () returned 0x3150000 [0063.043] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.043] GetProcessHeap () returned 0x3150000 [0063.044] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0063.044] GetProcessHeap () returned 0x3150000 [0063.044] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.044] GetProcessHeap () returned 0x3150000 [0063.044] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0063.045] GetProcessHeap () returned 0x3150000 [0063.045] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.045] GetProcessHeap () returned 0x3150000 [0063.045] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0063.045] GetProcessHeap () returned 0x3150000 [0063.045] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.045] GetProcessHeap () returned 0x3150000 [0063.045] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0063.046] GetProcessHeap () returned 0x3150000 [0063.046] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0063.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0063.047] GetProcessHeap () returned 0x3150000 [0063.047] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0063.047] GetProcessHeap () returned 0x3150000 [0063.047] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0063.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0063.048] GetProcessHeap () returned 0x3150000 [0063.048] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0063.048] GetProcessHeap () returned 0x3150000 [0063.048] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.049] GetProcessHeap () returned 0x3150000 [0063.049] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0063.049] GetProcessHeap () returned 0x3150000 [0063.049] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0063.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0063.049] GetProcessHeap () returned 0x3150000 [0063.049] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.049] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0063.221] GetProcessHeap () returned 0x3150000 [0063.221] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.221] GetProcessHeap () returned 0x3150000 [0063.221] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0063.222] GetProcessHeap () returned 0x3150000 [0063.222] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0063.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0063.222] GetProcessHeap () returned 0x3150000 [0063.222] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0063.223] GetProcessHeap () returned 0x3150000 [0063.223] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0063.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0063.223] GetProcessHeap () returned 0x3150000 [0063.223] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0063.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0063.225] GetProcessHeap () returned 0x3150000 [0063.225] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0063.225] GetProcessHeap () returned 0x3150000 [0063.225] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0063.225] GetProcessHeap () returned 0x3150000 [0063.225] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.226] GetProcessHeap () returned 0x3150000 [0063.226] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0063.226] GetProcessHeap () returned 0x3150000 [0063.226] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.227] GetProcessHeap () returned 0x3150000 [0063.227] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0063.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0063.228] GetProcessHeap () returned 0x3150000 [0063.228] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.228] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0063.228] GetProcessHeap () returned 0x3150000 [0063.228] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.228] GetProcessHeap () returned 0x3150000 [0063.228] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0063.229] GetProcessHeap () returned 0x3150000 [0063.229] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0063.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0063.230] GetProcessHeap () returned 0x3150000 [0063.230] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0063.230] GetProcessHeap () returned 0x3150000 [0063.230] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0063.231] GetProcessHeap () returned 0x3150000 [0063.231] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.231] GetProcessHeap () returned 0x3150000 [0063.231] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.232] GetProcessHeap () returned 0x3150000 [0063.232] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0063.232] GetProcessHeap () returned 0x3150000 [0063.232] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.232] GetProcessHeap () returned 0x3150000 [0063.232] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0063.233] GetProcessHeap () returned 0x3150000 [0063.233] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.233] GetProcessHeap () returned 0x3150000 [0063.233] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0063.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0063.234] GetProcessHeap () returned 0x3150000 [0063.234] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0063.234] GetProcessHeap () returned 0x3150000 [0063.234] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0063.237] GetProcessHeap () returned 0x3150000 [0063.237] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.237] GetProcessHeap () returned 0x3150000 [0063.237] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0063.239] GetProcessHeap () returned 0x3150000 [0063.239] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0063.239] GetProcessHeap () returned 0x3150000 [0063.239] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.239] GetProcessHeap () returned 0x3150000 [0063.239] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0063.240] GetProcessHeap () returned 0x3150000 [0063.240] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.240] GetProcessHeap () returned 0x3150000 [0063.240] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0063.241] GetProcessHeap () returned 0x3150000 [0063.241] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.241] GetProcessHeap () returned 0x3150000 [0063.241] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0063.241] GetProcessHeap () returned 0x3150000 [0063.241] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.241] GetProcessHeap () returned 0x3150000 [0063.241] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0063.241] GetProcessHeap () returned 0x3150000 [0063.241] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.241] GetProcessHeap () returned 0x3150000 [0063.241] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0063.242] GetProcessHeap () returned 0x3150000 [0063.242] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.242] GetProcessHeap () returned 0x3150000 [0063.242] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0063.243] GetProcessHeap () returned 0x3150000 [0063.243] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.243] GetProcessHeap () returned 0x3150000 [0063.243] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0063.243] GetProcessHeap () returned 0x3150000 [0063.243] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.243] GetProcessHeap () returned 0x3150000 [0063.243] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0063.244] GetProcessHeap () returned 0x3150000 [0063.244] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.244] GetProcessHeap () returned 0x3150000 [0063.244] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0063.244] GetProcessHeap () returned 0x3150000 [0063.244] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.244] GetProcessHeap () returned 0x3150000 [0063.244] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0063.244] GetProcessHeap () returned 0x3150000 [0063.244] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.244] GetProcessHeap () returned 0x3150000 [0063.244] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.245] GetProcessHeap () returned 0x3150000 [0063.245] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0063.247] GetProcessHeap () returned 0x3150000 [0063.247] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0063.248] GetProcessHeap () returned 0x3150000 [0063.248] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.248] GetProcessHeap () returned 0x3150000 [0063.248] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0063.248] GetProcessHeap () returned 0x3150000 [0063.248] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.248] GetProcessHeap () returned 0x3150000 [0063.248] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0063.249] GetProcessHeap () returned 0x3150000 [0063.249] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.249] GetProcessHeap () returned 0x3150000 [0063.249] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.249] GetProcessHeap () returned 0x3150000 [0063.249] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0063.250] GetProcessHeap () returned 0x3150000 [0063.250] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0063.251] GetProcessHeap () returned 0x3150000 [0063.251] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.251] GetProcessHeap () returned 0x3150000 [0063.251] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.251] GetProcessHeap () returned 0x3150000 [0063.251] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0063.251] GetProcessHeap () returned 0x3150000 [0063.251] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0063.252] GetProcessHeap () returned 0x3150000 [0063.252] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.252] GetProcessHeap () returned 0x3150000 [0063.252] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0063.253] GetProcessHeap () returned 0x3150000 [0063.253] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0063.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0063.256] GetProcessHeap () returned 0x3150000 [0063.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0063.256] GetProcessHeap () returned 0x3150000 [0063.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.256] GetProcessHeap () returned 0x3150000 [0063.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.257] GetProcessHeap () returned 0x3150000 [0063.257] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0063.258] GetProcessHeap () returned 0x3150000 [0063.258] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0063.258] GetProcessHeap () returned 0x3150000 [0063.258] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0063.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0063.259] GetProcessHeap () returned 0x3150000 [0063.259] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0063.259] GetProcessHeap () returned 0x3150000 [0063.259] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.260] GetProcessHeap () returned 0x3150000 [0063.260] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.260] GetProcessHeap () returned 0x3150000 [0063.260] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.261] GetProcessHeap () returned 0x3150000 [0063.261] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0063.695] GetProcessHeap () returned 0x3150000 [0063.695] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0063.696] GetProcessHeap () returned 0x3150000 [0063.696] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.696] GetProcessHeap () returned 0x3150000 [0063.696] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.697] GetProcessHeap () returned 0x3150000 [0063.697] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0063.697] GetProcessHeap () returned 0x3150000 [0063.697] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0063.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0063.697] GetProcessHeap () returned 0x3150000 [0063.697] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.698] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0063.704] GetProcessHeap () returned 0x3150000 [0063.704] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.704] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0063.705] GetProcessHeap () returned 0x3150000 [0063.705] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.705] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0063.706] GetProcessHeap () returned 0x3150000 [0063.706] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0063.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0063.711] GetProcessHeap () returned 0x3150000 [0063.711] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0063.711] GetProcessHeap () returned 0x3150000 [0063.711] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0063.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0063.711] GetProcessHeap () returned 0x3150000 [0063.711] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0063.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0063.711] GetProcessHeap () returned 0x3150000 [0063.712] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0063.712] GetProcessHeap () returned 0x3150000 [0063.712] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0063.712] GetProcessHeap () returned 0x3150000 [0063.712] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.713] GetProcessHeap () returned 0x3150000 [0063.713] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.713] GetProcessHeap () returned 0x3150000 [0063.713] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.714] GetProcessHeap () returned 0x3150000 [0063.714] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.714] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0063.715] GetProcessHeap () returned 0x3150000 [0063.715] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.715] GetProcessHeap () returned 0x3150000 [0063.715] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0063.715] GetProcessHeap () returned 0x3150000 [0063.715] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0063.716] GetProcessHeap () returned 0x3150000 [0063.716] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0063.716] GetProcessHeap () returned 0x3150000 [0063.716] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.717] GetProcessHeap () returned 0x3150000 [0063.717] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.717] GetProcessHeap () returned 0x3150000 [0063.717] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.718] GetProcessHeap () returned 0x3150000 [0063.718] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0063.719] GetProcessHeap () returned 0x3150000 [0063.719] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0063.719] GetProcessHeap () returned 0x3150000 [0063.719] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.720] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0063.720] GetProcessHeap () returned 0x3150000 [0063.720] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.720] GetProcessHeap () returned 0x3150000 [0063.720] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.720] GetProcessHeap () returned 0x3150000 [0063.720] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.721] GetProcessHeap () returned 0x3150000 [0063.721] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0063.721] GetProcessHeap () returned 0x3150000 [0063.721] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0063.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0063.721] GetProcessHeap () returned 0x3150000 [0063.721] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0063.722] GetProcessHeap () returned 0x3150000 [0063.722] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0063.723] GetProcessHeap () returned 0x3150000 [0063.723] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0063.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0063.724] GetProcessHeap () returned 0x3150000 [0063.724] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0063.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0063.727] GetProcessHeap () returned 0x3150000 [0063.727] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0063.727] GetProcessHeap () returned 0x3150000 [0063.727] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0063.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0063.728] GetProcessHeap () returned 0x3150000 [0063.728] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0063.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0063.728] GetProcessHeap () returned 0x3150000 [0063.728] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0063.728] GetProcessHeap () returned 0x3150000 [0063.728] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0063.728] GetProcessHeap () returned 0x3150000 [0063.728] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0063.729] GetProcessHeap () returned 0x3150000 [0063.729] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0063.729] GetProcessHeap () returned 0x3150000 [0063.729] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0063.730] GetProcessHeap () returned 0x3150000 [0063.730] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0063.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0063.731] GetProcessHeap () returned 0x3150000 [0063.731] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0063.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0064.055] GetProcessHeap () returned 0x3150000 [0064.055] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0064.251] GetProcessHeap () returned 0x3150000 [0064.251] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.251] GetProcessHeap () returned 0x3150000 [0064.251] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0064.252] GetProcessHeap () returned 0x3150000 [0064.252] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0064.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\1033\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0064.253] GetProcessHeap () returned 0x3150000 [0064.253] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0064.253] GetProcessHeap () returned 0x3150000 [0064.253] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0064.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\DCF\\en\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0064.256] GetProcessHeap () returned 0x3150000 [0064.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0064.256] GetProcessHeap () returned 0x3150000 [0064.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.257] GetProcessHeap () returned 0x3150000 [0064.257] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.258] GetProcessHeap () returned 0x3150000 [0064.258] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.258] GetProcessHeap () returned 0x3150000 [0064.258] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0064.259] GetProcessHeap () returned 0x3150000 [0064.259] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0064.259] GetProcessHeap () returned 0x3150000 [0064.259] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0064.260] GetProcessHeap () returned 0x3150000 [0064.260] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.260] GetProcessHeap () returned 0x3150000 [0064.260] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.260] GetProcessHeap () returned 0x3150000 [0064.260] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.261] GetProcessHeap () returned 0x3150000 [0064.261] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0064.262] GetProcessHeap () returned 0x3150000 [0064.262] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0064.263] GetProcessHeap () returned 0x3150000 [0064.263] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0064.263] GetProcessHeap () returned 0x3150000 [0064.263] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.263] GetProcessHeap () returned 0x3150000 [0064.264] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.264] GetProcessHeap () returned 0x3150000 [0064.264] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.264] GetProcessHeap () returned 0x3150000 [0064.264] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0064.265] GetProcessHeap () returned 0x3150000 [0064.265] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Mozilla Firefox\\plugins\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0064.266] GetProcessHeap () returned 0x3150000 [0064.266] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.266] GetProcessHeap () returned 0x3150000 [0064.266] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.266] GetProcessHeap () returned 0x3150000 [0064.266] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0064.266] GetProcessHeap () returned 0x3150000 [0064.266] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0064.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\System\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0064.268] GetProcessHeap () returned 0x3150000 [0064.268] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0064.268] GetProcessHeap () returned 0x3150000 [0064.268] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0064.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\SystemX86\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0064.270] GetProcessHeap () returned 0x3150000 [0064.270] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0064.270] GetProcessHeap () returned 0x3150000 [0064.270] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0064.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0064.270] GetProcessHeap () returned 0x3150000 [0064.270] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0064.271] GetProcessHeap () returned 0x3150000 [0064.271] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0064.272] GetProcessHeap () returned 0x3150000 [0064.272] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0064.272] GetProcessHeap () returned 0x3150000 [0064.272] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0064.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_64\\Microsoft.Office.Access.BusinessDataCatalog\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0064.273] GetProcessHeap () returned 0x3150000 [0064.273] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0064.273] GetProcessHeap () returned 0x3150000 [0064.273] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.274] GetProcessHeap () returned 0x3150000 [0064.274] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.274] GetProcessHeap () returned 0x3150000 [0064.274] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0064.276] GetProcessHeap () returned 0x3150000 [0064.276] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0064.278] GetProcessHeap () returned 0x3150000 [0064.278] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0064.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.AdomdClient\\11.0.0.0__89845DCD8080CC91\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0064.278] GetProcessHeap () returned 0x3150000 [0064.278] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0064.279] GetProcessHeap () returned 0x3150000 [0064.279] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.279] GetProcessHeap () returned 0x3150000 [0064.280] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0064.281] GetProcessHeap () returned 0x3150000 [0064.281] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0064.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.AnalysisServices.SPClient.Interfaces\\11.0.0.0__89845DCD8080CC91\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0064.281] GetProcessHeap () returned 0x3150000 [0064.281] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0064.282] GetProcessHeap () returned 0x3150000 [0064.282] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.282] GetProcessHeap () returned 0x3150000 [0064.282] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0064.283] GetProcessHeap () returned 0x3150000 [0064.283] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0064.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.BusinessData\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0064.284] GetProcessHeap () returned 0x3150000 [0064.284] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0064.284] GetProcessHeap () returned 0x3150000 [0064.284] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.285] GetProcessHeap () returned 0x3150000 [0064.285] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0064.531] GetProcessHeap () returned 0x3150000 [0064.531] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0064.531] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessApplications.Diagnostics\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0064.532] GetProcessHeap () returned 0x3150000 [0064.532] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0064.532] GetProcessHeap () returned 0x3150000 [0064.532] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.533] GetProcessHeap () returned 0x3150000 [0064.533] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0064.534] GetProcessHeap () returned 0x3150000 [0064.534] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0064.534] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0064.534] GetProcessHeap () returned 0x3150000 [0064.535] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0064.535] GetProcessHeap () returned 0x3150000 [0064.535] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.535] GetProcessHeap () returned 0x3150000 [0064.535] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0064.536] GetProcessHeap () returned 0x3150000 [0064.536] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0064.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0064.537] GetProcessHeap () returned 0x3150000 [0064.537] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0064.537] GetProcessHeap () returned 0x3150000 [0064.537] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.538] GetProcessHeap () returned 0x3150000 [0064.538] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.538] GetProcessHeap () returned 0x3150000 [0064.538] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.539] GetProcessHeap () returned 0x3150000 [0064.539] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\INF\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0064.539] GetProcessHeap () returned 0x3150000 [0064.539] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.539] GetProcessHeap () returned 0x3150000 [0064.539] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0064.540] GetProcessHeap () returned 0x3150000 [0064.540] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-000F-0000-1000-0000000FF1CE}\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc36c3d3f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc434832e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0064.540] GetProcessHeap () returned 0x3150000 [0064.540] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.540] GetProcessHeap () returned 0x3150000 [0064.540] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0064.541] GetProcessHeap () returned 0x3150000 [0064.541] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.541] GetProcessHeap () returned 0x3150000 [0064.541] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-040C-1000-0000000FF1CE}\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0064.541] GetProcessHeap () returned 0x3150000 [0064.541] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.541] GetProcessHeap () returned 0x3150000 [0064.541] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-001F-0C0A-1000-0000000FF1CE}\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0064.542] GetProcessHeap () returned 0x3150000 [0064.542] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.542] GetProcessHeap () returned 0x3150000 [0064.542] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\Installer\\{90160000-006E-0409-1000-0000000FF1CE}\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0064.542] GetProcessHeap () returned 0x3150000 [0064.542] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.542] GetProcessHeap () returned 0x3150000 [0064.542] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.543] GetProcessHeap () returned 0x3150000 [0064.543] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0064.543] GetProcessHeap () returned 0x3150000 [0064.543] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0064.544] GetProcessHeap () returned 0x3150000 [0064.544] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QHEADLES\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0064.545] GetProcessHeap () returned 0x3150000 [0064.545] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.545] GetProcessHeap () returned 0x3150000 [0064.545] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\PCHEALTH\\ERRORREP\\QSIGNOFF\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0064.545] GetProcessHeap () returned 0x3150000 [0064.545] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.545] GetProcessHeap () returned 0x3150000 [0064.545] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.546] GetProcessHeap () returned 0x3150000 [0064.546] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.546] GetProcessHeap () returned 0x3150000 [0064.546] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\SHELLNEW\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0064.546] GetProcessHeap () returned 0x3150000 [0064.546] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.546] GetProcessHeap () returned 0x3150000 [0064.547] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0064.547] GetProcessHeap () returned 0x3150000 [0064.547] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0064.547] GetProcessHeap () returned 0x3150000 [0064.547] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0064.548] GetProcessHeap () returned 0x3150000 [0064.548] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0064.548] GetProcessHeap () returned 0x3150000 [0064.548] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0064.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office 15\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e68d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0064.548] GetProcessHeap () returned 0x3150000 [0064.548] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0064.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office 15\\ClientX64\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0064.549] GetProcessHeap () returned 0x3150000 [0064.549] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0064.549] GetProcessHeap () returned 0x3150000 [0064.549] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0064.550] GetProcessHeap () returned 0x3150000 [0064.550] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0064.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0064.553] GetProcessHeap () returned 0x3150000 [0064.553] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0064.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb0da723, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xece35df2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xece35df2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0064.555] GetProcessHeap () returned 0x3150000 [0064.555] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0064.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\extensions\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb40aac, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb40aac, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0064.556] GetProcessHeap () returned 0x3150000 [0064.556] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0064.556] GetProcessHeap () returned 0x3150000 [0064.556] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0064.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\features\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0064.558] GetProcessHeap () returned 0x3150000 [0064.558] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0064.558] GetProcessHeap () returned 0x3150000 [0064.558] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0064.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\browser\\VisualElements\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0064.558] GetProcessHeap () returned 0x3150000 [0064.558] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0064.558] GetProcessHeap () returned 0x3150000 [0064.558] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0064.559] GetProcessHeap () returned 0x3150000 [0064.559] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0064.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\defaults\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec080216, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0064.559] GetProcessHeap () returned 0x3150000 [0064.559] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0064.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\defaults\\pref\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0064.560] GetProcessHeap () returned 0x3150000 [0064.560] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0064.560] GetProcessHeap () returned 0x3150000 [0064.561] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0064.562] GetProcessHeap () returned 0x3150000 [0064.562] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0064.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\dictionaries\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecc92398, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecc92398, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0064.562] GetProcessHeap () returned 0x3150000 [0064.562] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0064.563] GetProcessHeap () returned 0x3150000 [0064.563] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0064.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\fonts\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec0f2926, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecbad561, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecbad561, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0064.563] GetProcessHeap () returned 0x3150000 [0064.563] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0064.563] GetProcessHeap () returned 0x3150000 [0064.563] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0064.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecaee98b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecaee98b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0064.563] GetProcessHeap () returned 0x3150000 [0064.564] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0064.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\gmp-clearkey\\0.1\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0064.564] GetProcessHeap () returned 0x3150000 [0064.564] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0064.565] GetProcessHeap () returned 0x3150000 [0064.565] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0064.565] GetProcessHeap () returned 0x3150000 [0064.565] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0064.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Mozilla Firefox\\uninstall\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0064.566] GetProcessHeap () returned 0x3150000 [0064.566] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0064.566] GetProcessHeap () returned 0x3150000 [0064.566] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0064.567] GetProcessHeap () returned 0x3150000 [0064.567] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0064.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x53a895a, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x53a895a, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0064.567] GetProcessHeap () returned 0x3150000 [0064.567] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0064.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0064.691] GetProcessHeap () returned 0x3150000 [0064.691] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0064.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0064.702] GetProcessHeap () returned 0x3150000 [0064.702] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.703] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709c717f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709c717f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0064.703] GetProcessHeap () returned 0x3150000 [0064.704] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.704] GetProcessHeap () returned 0x3150000 [0064.704] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.704] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709ed3a7, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709ed3a7, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0064.704] GetProcessHeap () returned 0x3150000 [0064.704] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.704] GetProcessHeap () returned 0x3150000 [0064.704] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0064.705] GetProcessHeap () returned 0x3150000 [0064.705] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0064.705] GetProcessHeap () returned 0x3150000 [0064.705] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0064.705] GetProcessHeap () returned 0x3150000 [0064.705] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0064.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709ed3a7, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709ed3a7, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0064.706] GetProcessHeap () returned 0x3150000 [0064.706] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0064.706] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x709ed3a7, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x709ed3a7, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0064.706] GetProcessHeap () returned 0x3150000 [0064.706] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0064.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70a5faff, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70a5faff, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0064.707] GetProcessHeap () returned 0x3150000 [0064.707] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.707] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70a3987a, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70a3987a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0064.709] GetProcessHeap () returned 0x3150000 [0064.709] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70a3987a, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70a3987a, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70a3987a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0064.710] GetProcessHeap () returned 0x3150000 [0064.710] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.710] GetProcessHeap () returned 0x3150000 [0064.710] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.711] GetProcessHeap () returned 0x3150000 [0064.711] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70a5faff, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0064.713] GetProcessHeap () returned 0x3150000 [0064.713] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\RedistList\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0064.713] GetProcessHeap () returned 0x3150000 [0064.713] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0064.713] GetProcessHeap () returned 0x3150000 [0064.713] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0064.714] GetProcessHeap () returned 0x3150000 [0064.714] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0064.714] GetProcessHeap () returned 0x3150000 [0064.714] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0064.715] GetProcessHeap () returned 0x3150000 [0064.715] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0064.715] GetProcessHeap () returned 0x3150000 [0064.715] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0064.715] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\rempl\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa73e1bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8390c831, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0064.715] GetProcessHeap () returned 0x3150000 [0064.715] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0064.716] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\rempl\\Logs\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0064.719] GetProcessHeap () returned 0x3150000 [0064.719] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0064.719] GetProcessHeap () returned 0x3150000 [0064.719] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0064.719] GetProcessHeap () returned 0x3150000 [0064.719] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0064.719] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x53a895a, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x53a895a, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0064.720] GetProcessHeap () returned 0x3150000 [0064.720] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0064.720] GetProcessHeap () returned 0x3150000 [0064.720] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0064.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747f43e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x749f4454, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0064.721] GetProcessHeap () returned 0x3150000 [0064.721] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0064.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0064.721] GetProcessHeap () returned 0x3150000 [0064.721] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0064.721] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0064.721] GetProcessHeap () returned 0x3150000 [0064.722] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0064.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0064.722] GetProcessHeap () returned 0x3150000 [0064.722] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0064.722] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76437f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0064.723] GetProcessHeap () returned 0x3150000 [0064.723] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ar-sa\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa76f9fe7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0064.723] GetProcessHeap () returned 0x3150000 [0064.723] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.723] GetProcessHeap () returned 0x3150000 [0064.723] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.723] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\bg-BG\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0064.724] GetProcessHeap () returned 0x3150000 [0064.724] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.724] GetProcessHeap () returned 0x3150000 [0064.724] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ca-ES\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0064.724] GetProcessHeap () returned 0x3150000 [0064.724] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.724] GetProcessHeap () returned 0x3150000 [0064.724] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.724] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ca-ES-valencia\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0064.725] GetProcessHeap () returned 0x3150000 [0064.725] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.725] GetProcessHeap () returned 0x3150000 [0064.725] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\cs-CZ\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0064.725] GetProcessHeap () returned 0x3150000 [0064.725] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.725] GetProcessHeap () returned 0x3150000 [0064.725] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.725] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\da-DK\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0064.725] GetProcessHeap () returned 0x3150000 [0064.725] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.726] GetProcessHeap () returned 0x3150000 [0064.726] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-AT\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0064.726] GetProcessHeap () returned 0x3150000 [0064.726] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.726] GetProcessHeap () returned 0x3150000 [0064.726] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-CH\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0064.726] GetProcessHeap () returned 0x3150000 [0064.726] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.726] GetProcessHeap () returned 0x3150000 [0064.726] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.726] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\de-DE\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0064.727] GetProcessHeap () returned 0x3150000 [0064.727] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.727] GetProcessHeap () returned 0x3150000 [0064.727] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\el-GR\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0064.727] GetProcessHeap () returned 0x3150000 [0064.727] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.727] GetProcessHeap () returned 0x3150000 [0064.727] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-AU\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0064.727] GetProcessHeap () returned 0x3150000 [0064.727] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.727] GetProcessHeap () returned 0x3150000 [0064.727] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.727] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-CA\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0064.728] GetProcessHeap () returned 0x3150000 [0064.728] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.728] GetProcessHeap () returned 0x3150000 [0064.728] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0064.728] GetProcessHeap () returned 0x3150000 [0064.728] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.728] GetProcessHeap () returned 0x3150000 [0064.728] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-HK\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0064.728] GetProcessHeap () returned 0x3150000 [0064.728] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.728] GetProcessHeap () returned 0x3150000 [0064.728] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.728] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ID\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0064.729] GetProcessHeap () returned 0x3150000 [0064.729] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.729] GetProcessHeap () returned 0x3150000 [0064.729] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IE\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0064.729] GetProcessHeap () returned 0x3150000 [0064.729] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.729] GetProcessHeap () returned 0x3150000 [0064.729] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IN\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0064.729] GetProcessHeap () returned 0x3150000 [0064.729] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.729] GetProcessHeap () returned 0x3150000 [0064.729] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.729] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-MY\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0064.730] GetProcessHeap () returned 0x3150000 [0064.730] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.730] GetProcessHeap () returned 0x3150000 [0064.730] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-NZ\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0064.730] GetProcessHeap () returned 0x3150000 [0064.730] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.730] GetProcessHeap () returned 0x3150000 [0064.730] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-PH\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0064.730] GetProcessHeap () returned 0x3150000 [0064.730] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.730] GetProcessHeap () returned 0x3150000 [0064.730] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.730] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-US\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0064.730] GetProcessHeap () returned 0x3150000 [0064.730] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.731] GetProcessHeap () returned 0x3150000 [0064.731] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ZA\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0064.731] GetProcessHeap () returned 0x3150000 [0064.731] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.731] GetProcessHeap () returned 0x3150000 [0064.731] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-AR\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0064.731] GetProcessHeap () returned 0x3150000 [0064.731] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.731] GetProcessHeap () returned 0x3150000 [0064.731] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.731] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-CL\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0064.731] GetProcessHeap () returned 0x3150000 [0064.731] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.731] GetProcessHeap () returned 0x3150000 [0064.731] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-CO\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0064.732] GetProcessHeap () returned 0x3150000 [0064.732] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.732] GetProcessHeap () returned 0x3150000 [0064.732] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-ES\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0064.732] GetProcessHeap () returned 0x3150000 [0064.732] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.732] GetProcessHeap () returned 0x3150000 [0064.732] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-MX\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0064.732] GetProcessHeap () returned 0x3150000 [0064.732] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.732] GetProcessHeap () returned 0x3150000 [0064.732] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.732] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-US\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0064.733] GetProcessHeap () returned 0x3150000 [0064.733] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.733] GetProcessHeap () returned 0x3150000 [0064.733] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\es-XL\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0064.733] GetProcessHeap () returned 0x3150000 [0064.733] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.733] GetProcessHeap () returned 0x3150000 [0064.733] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\et-EE\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0064.733] GetProcessHeap () returned 0x3150000 [0064.733] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.733] GetProcessHeap () returned 0x3150000 [0064.733] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.733] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\eu-ES\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0064.734] GetProcessHeap () returned 0x3150000 [0064.734] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.734] GetProcessHeap () returned 0x3150000 [0064.734] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fi-FI\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0064.734] GetProcessHeap () returned 0x3150000 [0064.734] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.734] GetProcessHeap () returned 0x3150000 [0064.734] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-BE\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0064.734] GetProcessHeap () returned 0x3150000 [0064.734] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.734] GetProcessHeap () returned 0x3150000 [0064.734] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-CA\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0064.734] GetProcessHeap () returned 0x3150000 [0064.734] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.734] GetProcessHeap () returned 0x3150000 [0064.735] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-CH\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0064.735] GetProcessHeap () returned 0x3150000 [0064.735] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.735] GetProcessHeap () returned 0x3150000 [0064.735] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-FR\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830d026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2ef892, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0064.735] GetProcessHeap () returned 0x3150000 [0064.735] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.735] GetProcessHeap () returned 0x3150000 [0064.735] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\fr-XF\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830f28d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0064.735] GetProcessHeap () returned 0x3150000 [0064.735] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.735] GetProcessHeap () returned 0x3150000 [0064.735] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.735] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\gl-ES\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8397774, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0064.736] GetProcessHeap () returned 0x3150000 [0064.736] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.736] GetProcessHeap () returned 0x3150000 [0064.736] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\he-IL\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83e88ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0064.736] GetProcessHeap () returned 0x3150000 [0064.736] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.736] GetProcessHeap () returned 0x3150000 [0064.736] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\hr-HR\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83eab4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0064.736] GetProcessHeap () returned 0x3150000 [0064.736] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.736] GetProcessHeap () returned 0x3150000 [0064.736] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\hu-HU\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84655fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0064.736] GetProcessHeap () returned 0x3150000 [0064.737] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.737] GetProcessHeap () returned 0x3150000 [0064.737] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\is-IS\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84b3b2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0064.737] GetProcessHeap () returned 0x3150000 [0064.737] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.737] GetProcessHeap () returned 0x3150000 [0064.737] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\it-IT\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0064.737] GetProcessHeap () returned 0x3150000 [0064.737] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.737] GetProcessHeap () returned 0x3150000 [0064.737] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ja-JP\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85726e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0064.737] GetProcessHeap () returned 0x3150000 [0064.737] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.737] GetProcessHeap () returned 0x3150000 [0064.737] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.737] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ko-KR\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8575326, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0064.738] GetProcessHeap () returned 0x3150000 [0064.738] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.738] GetProcessHeap () returned 0x3150000 [0064.738] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lb-LU\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85bfd1b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0064.738] GetProcessHeap () returned 0x3150000 [0064.738] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.738] GetProcessHeap () returned 0x3150000 [0064.738] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lt-LT\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa860670d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0064.738] GetProcessHeap () returned 0x3150000 [0064.738] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.738] GetProcessHeap () returned 0x3150000 [0064.738] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\lv-LV\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8608b57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0064.739] GetProcessHeap () returned 0x3150000 [0064.739] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.739] GetProcessHeap () returned 0x3150000 [0064.739] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ms-MY\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8663023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0064.739] GetProcessHeap () returned 0x3150000 [0064.739] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.739] GetProcessHeap () returned 0x3150000 [0064.739] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nb-NO\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0064.739] GetProcessHeap () returned 0x3150000 [0064.739] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.739] GetProcessHeap () returned 0x3150000 [0064.739] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0064.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nl-BE\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0064.739] GetProcessHeap () returned 0x3150000 [0064.739] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0064.739] GetProcessHeap () returned 0x3150000 [0064.739] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nl-NL\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0065.075] GetProcessHeap () returned 0x3150000 [0065.075] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.075] GetProcessHeap () returned 0x3150000 [0065.075] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\nn-NO\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0065.076] GetProcessHeap () returned 0x3150000 [0065.076] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.076] GetProcessHeap () returned 0x3150000 [0065.076] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pl-PL\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa870879d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f741ca5, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0065.076] GetProcessHeap () returned 0x3150000 [0065.076] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.076] GetProcessHeap () returned 0x3150000 [0065.076] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pt-BR\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8758deb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8fb21a2e, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0065.076] GetProcessHeap () returned 0x3150000 [0065.076] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.076] GetProcessHeap () returned 0x3150000 [0065.076] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\pt-PT\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb940f6, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa879d17a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x910709ea, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0065.076] GetProcessHeap () returned 0x3150000 [0065.076] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.077] GetProcessHeap () returned 0x3150000 [0065.077] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\resources\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8805329, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ab8c63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0065.077] GetProcessHeap () returned 0x3150000 [0065.077] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.077] GetProcessHeap () returned 0x3150000 [0065.077] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ro-RO\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8807941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91b2b4b0, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0065.077] GetProcessHeap () returned 0x3150000 [0065.077] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.077] GetProcessHeap () returned 0x3150000 [0065.077] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\ru-RU\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0065.077] GetProcessHeap () returned 0x3150000 [0065.077] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.077] GetProcessHeap () returned 0x3150000 [0065.077] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sk-SK\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0065.078] GetProcessHeap () returned 0x3150000 [0065.078] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.078] GetProcessHeap () returned 0x3150000 [0065.078] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sl-SI\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0065.078] GetProcessHeap () returned 0x3150000 [0065.078] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.078] GetProcessHeap () returned 0x3150000 [0065.078] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sr-Latn-RS\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0065.078] GetProcessHeap () returned 0x3150000 [0065.078] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.078] GetProcessHeap () returned 0x3150000 [0065.078] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\sv-SE\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0065.079] GetProcessHeap () returned 0x3150000 [0065.079] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.079] GetProcessHeap () returned 0x3150000 [0065.079] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\th-TH\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0065.079] GetProcessHeap () returned 0x3150000 [0065.079] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.079] GetProcessHeap () returned 0x3150000 [0065.079] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\tr-TR\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0065.079] GetProcessHeap () returned 0x3150000 [0065.079] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.079] GetProcessHeap () returned 0x3150000 [0065.079] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\uk-UA\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0065.079] GetProcessHeap () returned 0x3150000 [0065.079] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.079] GetProcessHeap () returned 0x3150000 [0065.080] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\vi-VN\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0065.080] GetProcessHeap () returned 0x3150000 [0065.080] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.080] GetProcessHeap () returned 0x3150000 [0065.080] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-CN\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0065.080] GetProcessHeap () returned 0x3150000 [0065.080] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.080] GetProcessHeap () returned 0x3150000 [0065.080] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-HK\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0065.080] GetProcessHeap () returned 0x3150000 [0065.080] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.080] GetProcessHeap () returned 0x3150000 [0065.080] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0065.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\zh-TW\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0065.081] GetProcessHeap () returned 0x3150000 [0065.081] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0065.081] GetProcessHeap () returned 0x3150000 [0065.081] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0065.459] GetProcessHeap () returned 0x3150000 [0065.459] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.459] GetProcessHeap () returned 0x3150000 [0065.459] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.460] GetProcessHeap () returned 0x3150000 [0065.460] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.460] GetProcessHeap () returned 0x3150000 [0065.460] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.460] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\UNP\\Logs\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xcb3da31, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0xcb3da31, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0065.460] GetProcessHeap () returned 0x3150000 [0065.460] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.461] GetProcessHeap () returned 0x3150000 [0065.461] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0065.461] GetProcessHeap () returned 0x3150000 [0065.461] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0065.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8f11cc1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x711dc3b4, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0065.463] GetProcessHeap () returned 0x3150000 [0065.463] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\en-US\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fdc6ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0065.465] GetProcessHeap () returned 0x3150000 [0065.465] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.465] GetProcessHeap () returned 0x3150000 [0065.465] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.465] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender\\Offline\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8fdd5e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0065.465] GetProcessHeap () returned 0x3150000 [0065.466] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.466] GetProcessHeap () returned 0x3150000 [0065.466] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0065.466] GetProcessHeap () returned 0x3150000 [0065.466] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0065.466] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender Advanced Threat Protection\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x530ff74, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x530ff74, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0065.467] GetProcessHeap () returned 0x3150000 [0065.467] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0065.467] GetProcessHeap () returned 0x3150000 [0065.467] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.467] GetProcessHeap () returned 0x3150000 [0065.467] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0065.468] GetProcessHeap () returned 0x3150000 [0065.468] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0065.468] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x52e9e58, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x52e9e58, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0065.468] GetProcessHeap () returned 0x3150000 [0065.468] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.469] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0065.469] GetProcessHeap () returned 0x3150000 [0065.469] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.469] GetProcessHeap () returned 0x3150000 [0065.469] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0065.470] GetProcessHeap () returned 0x3150000 [0065.470] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0065.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9123675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0065.470] GetProcessHeap () returned 0x3150000 [0065.470] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\en-US\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9124bcc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0065.472] GetProcessHeap () returned 0x3150000 [0065.472] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.472] GetProcessHeap () returned 0x3150000 [0065.472] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Icons\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0065.472] GetProcessHeap () returned 0x3150000 [0065.472] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.472] GetProcessHeap () returned 0x3150000 [0065.472] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.473] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Media Renderer\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0065.475] GetProcessHeap () returned 0x3150000 [0065.475] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.475] GetProcessHeap () returned 0x3150000 [0065.475] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Network Sharing\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c5441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0065.477] GetProcessHeap () returned 0x3150000 [0065.477] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.477] GetProcessHeap () returned 0x3150000 [0065.477] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Skins\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c66b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0065.477] GetProcessHeap () returned 0x3150000 [0065.477] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.477] GetProcessHeap () returned 0x3150000 [0065.477] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Media Player\\Visualizations\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0065.478] GetProcessHeap () returned 0x3150000 [0065.478] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.478] GetProcessHeap () returned 0x3150000 [0065.478] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0065.478] GetProcessHeap () returned 0x3150000 [0065.478] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0065.479] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Multimedia Platform\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x53a895a, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x53a895a, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0065.479] GetProcessHeap () returned 0x3150000 [0065.479] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0065.479] GetProcessHeap () returned 0x3150000 [0065.479] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0065.479] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c8710, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0065.479] GetProcessHeap () returned 0x3150000 [0065.479] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.479] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c944d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7120260d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0065.480] GetProcessHeap () returned 0x3150000 [0065.480] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\Accessories\\en-US\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c9e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0065.480] GetProcessHeap () returned 0x3150000 [0065.480] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.480] GetProcessHeap () returned 0x3150000 [0065.480] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.481] GetProcessHeap () returned 0x3150000 [0065.481] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0065.484] GetProcessHeap () returned 0x3150000 [0065.484] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.484] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows NT\\TableTextService\\en-US\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9258521, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0065.484] GetProcessHeap () returned 0x3150000 [0065.484] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.484] GetProcessHeap () returned 0x3150000 [0065.484] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.484] GetProcessHeap () returned 0x3150000 [0065.484] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0065.485] GetProcessHeap () returned 0x3150000 [0065.485] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0065.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x6433130, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x6433130, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0065.486] GetProcessHeap () returned 0x3150000 [0065.486] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Photo Viewer\\en-US\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ab93a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0065.486] GetProcessHeap () returned 0x3150000 [0065.486] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.486] GetProcessHeap () returned 0x3150000 [0065.486] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0065.487] GetProcessHeap () returned 0x3150000 [0065.487] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0065.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Portable Devices\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0065.487] GetProcessHeap () returned 0x3150000 [0065.487] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0065.487] GetProcessHeap () returned 0x3150000 [0065.487] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0065.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0065.488] GetProcessHeap () returned 0x3150000 [0065.488] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\BrowserCore\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0065.488] GetProcessHeap () returned 0x3150000 [0065.488] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Security\\BrowserCore\\en-US\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0065.489] GetProcessHeap () returned 0x3150000 [0065.489] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.489] GetProcessHeap () returned 0x3150000 [0065.489] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.489] GetProcessHeap () returned 0x3150000 [0065.489] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0065.686] GetProcessHeap () returned 0x3150000 [0065.686] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0065.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aed1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0065.687] GetProcessHeap () returned 0x3150000 [0065.687] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.687] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92af7c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0065.688] GetProcessHeap () returned 0x3150000 [0065.688] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.688] GetProcessHeap () returned 0x3150000 [0065.688] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\Windows Sidebar\\Shared Gadgets\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0065.688] GetProcessHeap () returned 0x3150000 [0065.688] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.688] GetProcessHeap () returned 0x3150000 [0065.688] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0065.688] GetProcessHeap () returned 0x3150000 [0065.688] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0065.688] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0065.695] GetProcessHeap () returned 0x3150000 [0065.695] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x223c89ad, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93a9ec0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0065.700] GetProcessHeap () returned 0x3150000 [0065.700] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x228b384c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93abe68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x228b384c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0065.701] GetProcessHeap () returned 0x3150000 [0065.701] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.701] GetProcessHeap () returned 0x3150000 [0065.701] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x229e4b3b, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa94b581e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2310be20, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0065.708] GetProcessHeap () returned 0x3150000 [0065.708] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\App\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x229e4b3b, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa95725d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x22a0ae1c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0065.711] GetProcessHeap () returned 0x3150000 [0065.711] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.711] GetProcessHeap () returned 0x3150000 [0065.711] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\Periscope\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a31024, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa95a0375, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x22a572ca, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0065.713] GetProcessHeap () returned 0x3150000 [0065.713] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.733] GetProcessHeap () returned 0x3150000 [0065.733] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.733] GetProcessHeap () returned 0x3150000 [0065.733] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.734] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967b88f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2313207f, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0065.736] GetProcessHeap () returned 0x3150000 [0065.736] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.736] GetProcessHeap () returned 0x3150000 [0065.736] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.736] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3002ee68, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967c915, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0065.737] GetProcessHeap () returned 0x3150000 [0065.737] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.737] GetProcessHeap () returned 0x3150000 [0065.737] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.738] GetProcessHeap () returned 0x3150000 [0065.738] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.738] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Deleted\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa967d4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0065.739] GetProcessHeap () returned 0x3150000 [0065.739] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.739] GetProcessHeap () returned 0x3150000 [0065.739] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.739] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3c9c41d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0065.860] GetProcessHeap () returned 0x3150000 [0065.860] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9730ad4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x96c0f12e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0065.861] GetProcessHeap () returned 0x3150000 [0065.861] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.861] GetProcessHeap () returned 0x3150000 [0065.861] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3c9c41d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xa973141d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0065.862] GetProcessHeap () returned 0x3150000 [0065.862] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.862] GetProcessHeap () returned 0x3150000 [0065.862] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.863] GetProcessHeap () returned 0x3150000 [0065.863] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dd8d87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0065.865] GetProcessHeap () returned 0x3150000 [0065.865] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9785683, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x96dfefce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0065.866] GetProcessHeap () returned 0x3150000 [0065.866] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.866] GetProcessHeap () returned 0x3150000 [0065.866] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa97d9a35, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0065.868] GetProcessHeap () returned 0x3150000 [0065.868] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e25227, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a3eee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970877d7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0065.871] GetProcessHeap () returned 0x3150000 [0065.871] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.871] GetProcessHeap () returned 0x3150000 [0065.871] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a4daf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0065.871] GetProcessHeap () returned 0x3150000 [0065.871] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0065.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\Contrast-black\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a634d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0065.872] GetProcessHeap () returned 0x3150000 [0065.872] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0065.872] GetProcessHeap () returned 0x3150000 [0065.872] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0065.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\contrast-white\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a6acd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0065.873] GetProcessHeap () returned 0x3150000 [0065.873] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0065.873] GetProcessHeap () returned 0x3150000 [0065.873] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.873] GetProcessHeap () returned 0x3150000 [0065.873] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7570, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0065.874] GetProcessHeap () returned 0x3150000 [0065.874] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.874] GetProcessHeap () returned 0x3150000 [0065.874] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7e68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0065.874] GetProcessHeap () returned 0x3150000 [0065.874] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.874] GetProcessHeap () returned 0x3150000 [0065.874] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970d3c8f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9987cd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x972809b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0065.877] GetProcessHeap () returned 0x3150000 [0065.877] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.877] GetProcessHeap () returned 0x3150000 [0065.877] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x972809b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa998957e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x972da738, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0065.877] GetProcessHeap () returned 0x3150000 [0065.877] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.878] GetProcessHeap () returned 0x3150000 [0065.878] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa998a0eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x974a57e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0065.879] GetProcessHeap () returned 0x3150000 [0065.879] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0065.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\contrast-black\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9a18213, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9739a738, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0065.882] GetProcessHeap () returned 0x3150000 [0065.882] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0065.882] GetProcessHeap () returned 0x3150000 [0065.882] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0065.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\contrast-white\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9739a738, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9a9f7f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x974330d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0065.884] GetProcessHeap () returned 0x3150000 [0065.884] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0065.884] GetProcessHeap () returned 0x3150000 [0065.884] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.885] GetProcessHeap () returned 0x3150000 [0065.885] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x974a57e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa16f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x975664ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0065.888] GetProcessHeap () returned 0x3150000 [0065.888] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.888] GetProcessHeap () returned 0x3150000 [0065.888] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975664ea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa22bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9758c747, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0065.888] GetProcessHeap () returned 0x3150000 [0065.888] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.888] GetProcessHeap () returned 0x3150000 [0065.888] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975d8bfa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b12d9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0065.890] GetProcessHeap () returned 0x3150000 [0065.890] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.890] GetProcessHeap () returned 0x3150000 [0065.890] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0065.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9764f8c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b67c1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x976e822e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0065.892] GetProcessHeap () returned 0x3150000 [0065.892] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0065.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\NavColumn_Black\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x976e822e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9bd111d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x977346e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0065.897] GetProcessHeap () returned 0x3150000 [0065.897] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0065.897] GetProcessHeap () returned 0x3150000 [0065.897] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0065.897] GetProcessHeap () returned 0x3150000 [0065.897] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.898] GetProcessHeap () returned 0x3150000 [0065.898] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9853e192, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9bd24bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9853e192, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0065.898] GetProcessHeap () returned 0x3150000 [0065.898] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.898] GetProcessHeap () returned 0x3150000 [0065.898] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0065.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3cc2682, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0065.898] GetProcessHeap () returned 0x3150000 [0065.898] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0065.898] GetProcessHeap () returned 0x3150000 [0065.898] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0065.899] GetProcessHeap () returned 0x3150000 [0065.899] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0065.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x339fb10b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb4a05954, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0066.174] GetProcessHeap () returned 0x3150000 [0066.174] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33a6d81b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9cb9e99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0066.175] GetProcessHeap () returned 0x3150000 [0066.175] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.175] GetProcessHeap () returned 0x3150000 [0066.175] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ccfdd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9cba947, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33cf6025, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0066.175] GetProcessHeap () returned 0x3150000 [0066.175] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.176] GetProcessHeap () returned 0x3150000 [0066.176] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb4a05954, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0066.176] GetProcessHeap () returned 0x3150000 [0066.176] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfcbee3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdfcbee3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.179] GetProcessHeap () returned 0x3150000 [0066.179] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.179] GetProcessHeap () returned 0x3150000 [0066.179] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.179] GetProcessHeap () returned 0x3150000 [0066.179] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.179] GetProcessHeap () returned 0x3150000 [0066.179] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb523798b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0066.181] GetProcessHeap () returned 0x3150000 [0066.181] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d73fc1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9e44ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33d73fc1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0066.181] GetProcessHeap () returned 0x3150000 [0066.181] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.181] GetProcessHeap () returned 0x3150000 [0066.181] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f2112c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9e45833, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33f47386, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0066.182] GetProcessHeap () returned 0x3150000 [0066.182] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.182] GetProcessHeap () returned 0x3150000 [0066.182] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb523798b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0066.183] GetProcessHeap () returned 0x3150000 [0066.183] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe0183a1, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe0183a1, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.183] GetProcessHeap () returned 0x3150000 [0066.183] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.183] GetProcessHeap () returned 0x3150000 [0066.183] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.184] GetProcessHeap () returned 0x3150000 [0066.184] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.184] GetProcessHeap () returned 0x3150000 [0066.184] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfa8fd8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2aac4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0066.186] GetProcessHeap () returned 0x3150000 [0066.186] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2be01, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.187] GetProcessHeap () returned 0x3150000 [0066.187] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.187] GetProcessHeap () returned 0x3150000 [0066.187] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2cc20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0066.189] GetProcessHeap () returned 0x3150000 [0066.189] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.189] GetProcessHeap () returned 0x3150000 [0066.189] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2d5d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.190] GetProcessHeap () returned 0x3150000 [0066.190] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.190] GetProcessHeap () returned 0x3150000 [0066.190] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0066.190] GetProcessHeap () returned 0x3150000 [0066.190] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.191] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x10032a71, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0066.192] GetProcessHeap () returned 0x3150000 [0066.192] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.192] GetProcessHeap () returned 0x3150000 [0066.192] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.193] GetProcessHeap () returned 0x3150000 [0066.193] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.193] GetProcessHeap () returned 0x3150000 [0066.193] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa041d8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0066.195] GetProcessHeap () returned 0x3150000 [0066.195] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa04335f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdf3689c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0066.196] GetProcessHeap () returned 0x3150000 [0066.196] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.196] GetProcessHeap () returned 0x3150000 [0066.196] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa043ddd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.196] GetProcessHeap () returned 0x3150000 [0066.196] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.196] GetProcessHeap () returned 0x3150000 [0066.196] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.197] GetProcessHeap () returned 0x3150000 [0066.197] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa095f16, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.199] GetProcessHeap () returned 0x3150000 [0066.199] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa096b21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x773fa578, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0066.200] GetProcessHeap () returned 0x3150000 [0066.200] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.200] GetProcessHeap () returned 0x3150000 [0066.200] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eed6166, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa097114, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0066.202] GetProcessHeap () returned 0x3150000 [0066.202] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.203] GetProcessHeap () returned 0x3150000 [0066.203] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.203] GetProcessHeap () returned 0x3150000 [0066.203] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7746cb84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa097cbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0066.205] GetProcessHeap () returned 0x3150000 [0066.205] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa098c51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.206] GetProcessHeap () returned 0x3150000 [0066.206] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.206] GetProcessHeap () returned 0x3150000 [0066.206] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0991e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0066.206] GetProcessHeap () returned 0x3150000 [0066.206] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0dcf11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0066.208] GetProcessHeap () returned 0x3150000 [0066.208] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0df02e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x774b901c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0066.211] GetProcessHeap () returned 0x3150000 [0066.211] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.211] GetProcessHeap () returned 0x3150000 [0066.211] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x774b901c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa14080b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x774df276, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0066.213] GetProcessHeap () returned 0x3150000 [0066.213] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.213] GetProcessHeap () returned 0x3150000 [0066.213] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.214] GetProcessHeap () returned 0x3150000 [0066.214] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.214] GetProcessHeap () returned 0x3150000 [0066.214] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa1412e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0066.215] GetProcessHeap () returned 0x3150000 [0066.215] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.215] GetProcessHeap () returned 0x3150000 [0066.215] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.215] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20b499, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0066.314] GetProcessHeap () returned 0x3150000 [0066.314] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.314] GetProcessHeap () returned 0x3150000 [0066.314] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776cf25e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20c37f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0066.315] GetProcessHeap () returned 0x3150000 [0066.315] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776f534b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20cf06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0066.315] GetProcessHeap () returned 0x3150000 [0066.315] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.315] GetProcessHeap () returned 0x3150000 [0066.315] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.316] GetProcessHeap () returned 0x3150000 [0066.316] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20dbad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0066.317] GetProcessHeap () returned 0x3150000 [0066.317] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20ead2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.317] GetProcessHeap () returned 0x3150000 [0066.317] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28c5b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0066.319] GetProcessHeap () returned 0x3150000 [0066.319] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28d627, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0066.320] GetProcessHeap () returned 0x3150000 [0066.320] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.320] GetProcessHeap () returned 0x3150000 [0066.320] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28dd9f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0066.320] GetProcessHeap () returned 0x3150000 [0066.320] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.321] GetProcessHeap () returned 0x3150000 [0066.321] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28e968, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0066.321] GetProcessHeap () returned 0x3150000 [0066.321] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.321] GetProcessHeap () returned 0x3150000 [0066.321] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28f394, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0066.322] GetProcessHeap () returned 0x3150000 [0066.322] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.322] GetProcessHeap () returned 0x3150000 [0066.322] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28fe63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0066.322] GetProcessHeap () returned 0x3150000 [0066.322] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.322] GetProcessHeap () returned 0x3150000 [0066.322] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2907e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0066.322] GetProcessHeap () returned 0x3150000 [0066.322] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.322] GetProcessHeap () returned 0x3150000 [0066.322] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.323] GetProcessHeap () returned 0x3150000 [0066.323] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.323] GetProcessHeap () returned 0x3150000 [0066.323] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.324] GetProcessHeap () returned 0x3150000 [0066.324] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2911b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0066.324] GetProcessHeap () returned 0x3150000 [0066.324] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291621, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0066.325] GetProcessHeap () returned 0x3150000 [0066.325] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291d28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.326] GetProcessHeap () returned 0x3150000 [0066.326] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa292432, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0066.326] GetProcessHeap () returned 0x3150000 [0066.326] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.326] GetProcessHeap () returned 0x3150000 [0066.326] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.327] GetProcessHeap () returned 0x3150000 [0066.327] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.327] GetProcessHeap () returned 0x3150000 [0066.327] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.328] GetProcessHeap () returned 0x3150000 [0066.328] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eefc3c1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa292b95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0066.329] GetProcessHeap () returned 0x3150000 [0066.329] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.329] GetProcessHeap () returned 0x3150000 [0066.329] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293090, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77be010a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.329] GetProcessHeap () returned 0x3150000 [0066.329] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.330] GetProcessHeap () returned 0x3150000 [0066.330] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0986e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0066.330] GetProcessHeap () returned 0x3150000 [0066.330] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.330] GetProcessHeap () returned 0x3150000 [0066.330] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.330] GetProcessHeap () returned 0x3150000 [0066.330] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293665, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0066.332] GetProcessHeap () returned 0x3150000 [0066.332] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293d66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70454cf5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0066.333] GetProcessHeap () returned 0x3150000 [0066.333] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.333] GetProcessHeap () returned 0x3150000 [0066.333] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa2942e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0066.334] GetProcessHeap () returned 0x3150000 [0066.334] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.334] GetProcessHeap () returned 0x3150000 [0066.334] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.335] GetProcessHeap () returned 0x3150000 [0066.335] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d4c9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0066.337] GetProcessHeap () returned 0x3150000 [0066.337] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d61ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.338] GetProcessHeap () returned 0x3150000 [0066.338] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.338] GetProcessHeap () returned 0x3150000 [0066.338] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d69dd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.338] GetProcessHeap () returned 0x3150000 [0066.338] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d7904, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0066.340] GetProcessHeap () returned 0x3150000 [0066.340] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa3cc321, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704c73fb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0066.342] GetProcessHeap () returned 0x3150000 [0066.342] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.342] GetProcessHeap () returned 0x3150000 [0066.342] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704c73fb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa457e69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0066.344] GetProcessHeap () returned 0x3150000 [0066.344] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.344] GetProcessHeap () returned 0x3150000 [0066.344] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.345] GetProcessHeap () returned 0x3150000 [0066.345] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.345] GetProcessHeap () returned 0x3150000 [0066.345] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.345] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa458f92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705138c0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0066.345] GetProcessHeap () returned 0x3150000 [0066.345] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.345] GetProcessHeap () returned 0x3150000 [0066.345] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.345] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70585fca, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa459889, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0066.346] GetProcessHeap () returned 0x3150000 [0066.346] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45a502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0066.346] GetProcessHeap () returned 0x3150000 [0066.346] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.346] GetProcessHeap () returned 0x3150000 [0066.346] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.347] GetProcessHeap () returned 0x3150000 [0066.347] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45af55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0066.349] GetProcessHeap () returned 0x3150000 [0066.349] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45be97, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0066.349] GetProcessHeap () returned 0x3150000 [0066.349] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45ce6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0066.489] GetProcessHeap () returned 0x3150000 [0066.489] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45dd3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.490] GetProcessHeap () returned 0x3150000 [0066.490] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.490] GetProcessHeap () returned 0x3150000 [0066.490] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45e65c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0066.490] GetProcessHeap () returned 0x3150000 [0066.490] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.490] GetProcessHeap () returned 0x3150000 [0066.490] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45f23f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0066.491] GetProcessHeap () returned 0x3150000 [0066.491] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.491] GetProcessHeap () returned 0x3150000 [0066.491] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.491] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45fd68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0066.491] GetProcessHeap () returned 0x3150000 [0066.491] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.491] GetProcessHeap () returned 0x3150000 [0066.491] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.491] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4608e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0066.491] GetProcessHeap () returned 0x3150000 [0066.491] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.491] GetProcessHeap () returned 0x3150000 [0066.491] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.491] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa461467, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.492] GetProcessHeap () returned 0x3150000 [0066.492] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.492] GetProcessHeap () returned 0x3150000 [0066.492] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.493] GetProcessHeap () returned 0x3150000 [0066.493] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.493] GetProcessHeap () returned 0x3150000 [0066.493] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.494] GetProcessHeap () returned 0x3150000 [0066.494] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4624cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0066.495] GetProcessHeap () returned 0x3150000 [0066.495] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.495] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa463310, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0066.495] GetProcessHeap () returned 0x3150000 [0066.495] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464150, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0066.496] GetProcessHeap () returned 0x3150000 [0066.496] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.497] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464f0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0066.498] GetProcessHeap () returned 0x3150000 [0066.498] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.498] GetProcessHeap () returned 0x3150000 [0066.498] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.499] GetProcessHeap () returned 0x3150000 [0066.499] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.499] GetProcessHeap () returned 0x3150000 [0066.499] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.500] GetProcessHeap () returned 0x3150000 [0066.500] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa466063, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0066.501] GetProcessHeap () returned 0x3150000 [0066.501] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.501] GetProcessHeap () returned 0x3150000 [0066.501] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.501] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa466b87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0066.501] GetProcessHeap () returned 0x3150000 [0066.502] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.502] GetProcessHeap () returned 0x3150000 [0066.502] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d5b50, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.502] GetProcessHeap () returned 0x3150000 [0066.502] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.502] GetProcessHeap () returned 0x3150000 [0066.502] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.503] GetProcessHeap () returned 0x3150000 [0066.503] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53d33a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.506] GetProcessHeap () returned 0x3150000 [0066.506] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53e492, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0066.506] GetProcessHeap () returned 0x3150000 [0066.506] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.506] GetProcessHeap () returned 0x3150000 [0066.506] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0066.507] GetProcessHeap () returned 0x3150000 [0066.507] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.507] GetProcessHeap () returned 0x3150000 [0066.507] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.507] GetProcessHeap () returned 0x3150000 [0066.507] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d0219, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0066.509] GetProcessHeap () returned 0x3150000 [0066.509] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d1b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0066.510] GetProcessHeap () returned 0x3150000 [0066.510] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.510] GetProcessHeap () returned 0x3150000 [0066.510] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d25c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0066.510] GetProcessHeap () returned 0x3150000 [0066.510] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d4131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0066.512] GetProcessHeap () returned 0x3150000 [0066.512] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa66b57d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0066.515] GetProcessHeap () returned 0x3150000 [0066.515] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.515] GetProcessHeap () returned 0x3150000 [0066.515] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c2ab5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.517] GetProcessHeap () returned 0x3150000 [0066.517] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.517] GetProcessHeap () returned 0x3150000 [0066.517] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.517] GetProcessHeap () returned 0x3150000 [0066.518] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.518] GetProcessHeap () returned 0x3150000 [0066.518] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c41d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0066.518] GetProcessHeap () returned 0x3150000 [0066.518] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.518] GetProcessHeap () returned 0x3150000 [0066.518] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c48a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0066.520] GetProcessHeap () returned 0x3150000 [0066.520] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c51ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.520] GetProcessHeap () returned 0x3150000 [0066.520] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.520] GetProcessHeap () returned 0x3150000 [0066.520] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.521] GetProcessHeap () returned 0x3150000 [0066.521] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c5add, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0066.521] GetProcessHeap () returned 0x3150000 [0066.521] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c62fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0066.522] GetProcessHeap () returned 0x3150000 [0066.522] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73b0f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0066.524] GetProcessHeap () returned 0x3150000 [0066.524] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Finance\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73c941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0066.650] GetProcessHeap () returned 0x3150000 [0066.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.650] GetProcessHeap () returned 0x3150000 [0066.650] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\FoodAndDrink\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73d444, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0066.650] GetProcessHeap () returned 0x3150000 [0066.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.650] GetProcessHeap () returned 0x3150000 [0066.650] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Health\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73dce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.650] GetProcessHeap () returned 0x3150000 [0066.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.650] GetProcessHeap () returned 0x3150000 [0066.651] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\News\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.651] GetProcessHeap () returned 0x3150000 [0066.651] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.651] GetProcessHeap () returned 0x3150000 [0066.651] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Sports\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73ed8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0066.651] GetProcessHeap () returned 0x3150000 [0066.652] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.652] GetProcessHeap () returned 0x3150000 [0066.652] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels\\Weather\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73f623, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0066.652] GetProcessHeap () returned 0x3150000 [0066.652] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.652] GetProcessHeap () returned 0x3150000 [0066.652] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.653] GetProcessHeap () returned 0x3150000 [0066.653] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.653] GetProcessHeap () returned 0x3150000 [0066.653] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.653] GetProcessHeap () returned 0x3150000 [0066.653] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7402e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0066.654] GetProcessHeap () returned 0x3150000 [0066.654] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741010, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0066.655] GetProcessHeap () returned 0x3150000 [0066.655] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741b52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0066.655] GetProcessHeap () returned 0x3150000 [0066.655] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.656] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa742614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.656] GetProcessHeap () returned 0x3150000 [0066.656] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.656] GetProcessHeap () returned 0x3150000 [0066.656] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.657] GetProcessHeap () returned 0x3150000 [0066.657] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.657] GetProcessHeap () returned 0x3150000 [0066.657] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.658] GetProcessHeap () returned 0x3150000 [0066.658] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608775e5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa743364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0066.658] GetProcessHeap () returned 0x3150000 [0066.658] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.658] GetProcessHeap () returned 0x3150000 [0066.659] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa743cf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0066.659] GetProcessHeap () returned 0x3150000 [0066.659] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.659] GetProcessHeap () returned 0x3150000 [0066.659] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.659] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7447d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0066.659] GetProcessHeap () returned 0x3150000 [0066.659] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7452b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0066.660] GetProcessHeap () returned 0x3150000 [0066.660] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.660] GetProcessHeap () returned 0x3150000 [0066.660] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.661] GetProcessHeap () returned 0x3150000 [0066.661] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0066.661] GetProcessHeap () returned 0x3150000 [0066.661] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.661] GetProcessHeap () returned 0x3150000 [0066.661] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.662] GetProcessHeap () returned 0x3150000 [0066.662] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0066.664] GetProcessHeap () returned 0x3150000 [0066.664] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.664] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7d9181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e4fcf04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.665] GetProcessHeap () returned 0x3150000 [0066.665] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7da30b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e622b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0066.666] GetProcessHeap () returned 0x3150000 [0066.666] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.667] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa84e071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e563f5f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0066.669] GetProcessHeap () returned 0x3150000 [0066.669] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.669] GetProcessHeap () returned 0x3150000 [0066.669] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.669] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e58a1bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa8cdeaf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e5b0416, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0066.671] GetProcessHeap () returned 0x3150000 [0066.671] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.671] GetProcessHeap () returned 0x3150000 [0066.671] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.672] GetProcessHeap () returned 0x3150000 [0066.672] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.672] GetProcessHeap () returned 0x3150000 [0066.672] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.672] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0066.673] GetProcessHeap () returned 0x3150000 [0066.673] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.673] GetProcessHeap () returned 0x3150000 [0066.673] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.674] GetProcessHeap () returned 0x3150000 [0066.674] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0066.678] GetProcessHeap () returned 0x3150000 [0066.678] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.678] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa935760, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2cdd5a7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0066.678] GetProcessHeap () returned 0x3150000 [0066.678] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.678] GetProcessHeap () returned 0x3150000 [0066.678] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.678] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.679] GetProcessHeap () returned 0x3150000 [0066.679] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.679] GetProcessHeap () returned 0x3150000 [0066.679] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.680] GetProcessHeap () returned 0x3150000 [0066.680] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.680] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ceba882, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0066.681] GetProcessHeap () returned 0x3150000 [0066.681] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa936cde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d0fdc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0066.682] GetProcessHeap () returned 0x3150000 [0066.682] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.682] GetProcessHeap () returned 0x3150000 [0066.682] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.682] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa937267, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2db7c876, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0066.682] GetProcessHeap () returned 0x3150000 [0066.682] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.683] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9d2e10, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d827806, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0066.684] GetProcessHeap () returned 0x3150000 [0066.684] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.685] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa1d3b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d2c78be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0066.872] GetProcessHeap () returned 0x3150000 [0066.872] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.872] GetProcessHeap () returned 0x3150000 [0066.872] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d2c78be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa975ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d388f04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0066.875] GetProcessHeap () returned 0x3150000 [0066.875] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.875] GetProcessHeap () returned 0x3150000 [0066.875] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\LiveTile\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d388f04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaac88c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d46dd2e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.877] GetProcessHeap () returned 0x3150000 [0066.877] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.877] GetProcessHeap () returned 0x3150000 [0066.877] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\Spacer\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d46dd2e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaabbfeb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d50668e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0066.879] GetProcessHeap () returned 0x3150000 [0066.879] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.879] GetProcessHeap () returned 0x3150000 [0066.879] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherIcons\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d59f00b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaabc1237, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d59f00b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0066.879] GetProcessHeap () returned 0x3150000 [0066.879] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherIcons\\30x30\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d59f00b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaac222e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d827806, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0066.884] GetProcessHeap () returned 0x3150000 [0066.884] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.884] GetProcessHeap () returned 0x3150000 [0066.884] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.885] GetProcessHeap () returned 0x3150000 [0066.885] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherImages\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d827806, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaac23e3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d9f144d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0066.885] GetProcessHeap () returned 0x3150000 [0066.885] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherImages\\210x173\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d827806, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaca3951, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d9cb1f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0066.888] GetProcessHeap () returned 0x3150000 [0066.888] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.888] GetProcessHeap () returned 0x3150000 [0066.888] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\WeatherImages\\423x173\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d9f144d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad0c763, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2db303c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0066.890] GetProcessHeap () returned 0x3150000 [0066.890] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.890] GetProcessHeap () returned 0x3150000 [0066.890] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.891] GetProcessHeap () returned 0x3150000 [0066.891] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.891] GetProcessHeap () returned 0x3150000 [0066.891] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\Attribution\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2db7c876, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad78aac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.893] GetProcessHeap () returned 0x3150000 [0066.893] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.893] GetProcessHeap () returned 0x3150000 [0066.893] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.894] GetProcessHeap () returned 0x3150000 [0066.894] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad79c2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0066.894] GetProcessHeap () returned 0x3150000 [0066.894] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.894] GetProcessHeap () returned 0x3150000 [0066.894] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7a6fb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0066.895] GetProcessHeap () returned 0x3150000 [0066.895] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.895] GetProcessHeap () returned 0x3150000 [0066.895] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd03022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ad84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd2927f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.895] GetProcessHeap () returned 0x3150000 [0066.895] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.895] GetProcessHeap () returned 0x3150000 [0066.895] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7b5bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.897] GetProcessHeap () returned 0x3150000 [0066.897] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7c2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0066.898] GetProcessHeap () returned 0x3150000 [0066.898] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.898] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7cee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0066.898] GetProcessHeap () returned 0x3150000 [0066.898] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.898] GetProcessHeap () returned 0x3150000 [0066.898] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.899] GetProcessHeap () returned 0x3150000 [0066.899] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.899] GetProcessHeap () returned 0x3150000 [0066.899] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7d91e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0066.899] GetProcessHeap () returned 0x3150000 [0066.899] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0066.900] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7e777, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0066.901] GetProcessHeap () returned 0x3150000 [0066.901] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0066.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7f48f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.902] GetProcessHeap () returned 0x3150000 [0066.902] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0066.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ff09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd75732, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0066.902] GetProcessHeap () returned 0x3150000 [0066.902] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0066.902] GetProcessHeap () returned 0x3150000 [0066.902] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0066.903] GetProcessHeap () returned 0x3150000 [0066.903] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0066.903] GetProcessHeap () returned 0x3150000 [0066.903] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.904] GetProcessHeap () returned 0x3150000 [0066.904] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x2d31f11, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x2d31f11, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0066.904] GetProcessHeap () returned 0x3150000 [0066.904] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.904] GetProcessHeap () returned 0x3150000 [0066.904] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9368ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d1965e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0066.905] GetProcessHeap () returned 0x3150000 [0066.905] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0066.905] GetProcessHeap () returned 0x3150000 [0066.905] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0066.905] GetProcessHeap () returned 0x3150000 [0066.905] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0066.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f377c2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3acdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0066.907] GetProcessHeap () returned 0x3150000 [0066.907] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0066.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f5da18, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3d897, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68f83c76, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0067.034] GetProcessHeap () returned 0x3150000 [0067.034] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.034] GetProcessHeap () returned 0x3150000 [0067.034] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaae3e4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0067.035] GetProcessHeap () returned 0x3150000 [0067.035] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.035] GetProcessHeap () returned 0x3150000 [0067.035] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.036] GetProcessHeap () returned 0x3150000 [0067.036] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebc8e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0067.039] GetProcessHeap () returned 0x3150000 [0067.039] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebe349, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68a98ed8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0067.040] GetProcessHeap () returned 0x3150000 [0067.040] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.040] GetProcessHeap () returned 0x3150000 [0067.040] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaaebeeeb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0067.040] GetProcessHeap () returned 0x3150000 [0067.040] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.040] GetProcessHeap () returned 0x3150000 [0067.040] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.045] GetProcessHeap () returned 0x3150000 [0067.045] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf17e9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0067.047] GetProcessHeap () returned 0x3150000 [0067.047] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf18f1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0067.048] GetProcessHeap () returned 0x3150000 [0067.048] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.048] GetProcessHeap () returned 0x3150000 [0067.048] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaafbd2f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68bca1ad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0067.052] GetProcessHeap () returned 0x3150000 [0067.052] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.052] GetProcessHeap () returned 0x3150000 [0067.052] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x134444f, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x134444f, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0067.054] GetProcessHeap () returned 0x3150000 [0067.054] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.054] GetProcessHeap () returned 0x3150000 [0067.054] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.055] GetProcessHeap () returned 0x3150000 [0067.055] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab021835, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0067.057] GetProcessHeap () returned 0x3150000 [0067.057] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab022752, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd526822a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0067.057] GetProcessHeap () returned 0x3150000 [0067.057] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.057] GetProcessHeap () returned 0x3150000 [0067.057] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.057] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab022fb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0067.058] GetProcessHeap () returned 0x3150000 [0067.058] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.058] GetProcessHeap () returned 0x3150000 [0067.058] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.058] GetProcessHeap () returned 0x3150000 [0067.058] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.059] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab088494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0067.060] GetProcessHeap () returned 0x3150000 [0067.060] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08a798, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0067.061] GetProcessHeap () returned 0x3150000 [0067.061] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.062] GetProcessHeap () returned 0x3150000 [0067.062] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd53994f2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08aff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd53994f2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0067.064] GetProcessHeap () returned 0x3150000 [0067.064] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.064] GetProcessHeap () returned 0x3150000 [0067.064] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08b876, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0067.064] GetProcessHeap () returned 0x3150000 [0067.064] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08c849, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0067.064] GetProcessHeap () returned 0x3150000 [0067.064] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.065] GetProcessHeap () returned 0x3150000 [0067.065] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08d12b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0067.068] GetProcessHeap () returned 0x3150000 [0067.068] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.069] GetProcessHeap () returned 0x3150000 [0067.069] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.069] GetProcessHeap () returned 0x3150000 [0067.069] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab08dbee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0067.070] GetProcessHeap () returned 0x3150000 [0067.070] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.070] GetProcessHeap () returned 0x3150000 [0067.070] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08e5b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0067.070] GetProcessHeap () returned 0x3150000 [0067.070] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08f2fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0067.070] GetProcessHeap () returned 0x3150000 [0067.070] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.070] GetProcessHeap () returned 0x3150000 [0067.070] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08fb6f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0067.071] GetProcessHeap () returned 0x3150000 [0067.071] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.071] GetProcessHeap () returned 0x3150000 [0067.071] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.072] GetProcessHeap () returned 0x3150000 [0067.072] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab089e41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0067.073] GetProcessHeap () returned 0x3150000 [0067.073] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.073] GetProcessHeap () returned 0x3150000 [0067.073] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.073] GetProcessHeap () returned 0x3150000 [0067.073] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d296410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0067.129] GetProcessHeap () returned 0x3150000 [0067.129] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d2bc66a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab13f343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0067.133] GetProcessHeap () returned 0x3150000 [0067.133] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d308b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1ce307, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0067.136] GetProcessHeap () returned 0x3150000 [0067.136] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.136] GetProcessHeap () returned 0x3150000 [0067.136] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1d0bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0067.138] GetProcessHeap () returned 0x3150000 [0067.138] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.138] GetProcessHeap () returned 0x3150000 [0067.138] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.138] GetProcessHeap () returned 0x3150000 [0067.138] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.138] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb9355ef2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0067.139] GetProcessHeap () returned 0x3150000 [0067.139] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.139] GetProcessHeap () returned 0x3150000 [0067.139] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.140] GetProcessHeap () returned 0x3150000 [0067.140] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c531351, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0067.142] GetProcessHeap () returned 0x3150000 [0067.142] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c5575af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab228e06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9c5575af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0067.142] GetProcessHeap () returned 0x3150000 [0067.142] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.142] GetProcessHeap () returned 0x3150000 [0067.142] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cdf7b05, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab2732ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d1b15f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0067.145] GetProcessHeap () returned 0x3150000 [0067.145] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.145] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cf75299, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab3100a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d080313, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0067.190] GetProcessHeap () returned 0x3150000 [0067.190] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.190] GetProcessHeap () returned 0x3150000 [0067.190] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d080313, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab39d704, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d18b39b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0067.194] GetProcessHeap () returned 0x3150000 [0067.194] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.194] GetProcessHeap () returned 0x3150000 [0067.194] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\FileIcons\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d18b39b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab446b84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d1d7849, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0067.196] GetProcessHeap () returned 0x3150000 [0067.196] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.196] GetProcessHeap () returned 0x3150000 [0067.196] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.197] GetProcessHeap () returned 0x3150000 [0067.197] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfe80d855, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe80d855, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0067.199] GetProcessHeap () returned 0x3150000 [0067.199] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.199] GetProcessHeap () returned 0x3150000 [0067.199] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.199] GetProcessHeap () returned 0x3150000 [0067.199] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0067.201] GetProcessHeap () returned 0x3150000 [0067.201] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab4afc0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9c3b24a6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0067.202] GetProcessHeap () returned 0x3150000 [0067.202] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.202] GetProcessHeap () returned 0x3150000 [0067.202] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0067.202] GetProcessHeap () returned 0x3150000 [0067.202] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.202] GetProcessHeap () returned 0x3150000 [0067.203] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.203] GetProcessHeap () returned 0x3150000 [0067.203] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0067.205] GetProcessHeap () returned 0x3150000 [0067.205] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab549f27, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0067.207] GetProcessHeap () returned 0x3150000 [0067.207] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.207] GetProcessHeap () returned 0x3150000 [0067.207] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.207] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad8fd68, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0067.208] GetProcessHeap () returned 0x3150000 [0067.208] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.209] GetProcessHeap () returned 0x3150000 [0067.209] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.209] GetProcessHeap () returned 0x3150000 [0067.209] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.209] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0067.266] GetProcessHeap () returned 0x3150000 [0067.266] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5eb5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ed19195, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0067.271] GetProcessHeap () returned 0x3150000 [0067.271] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.272] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee96925, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7eebcb7e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7eebcb7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0067.272] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad4389d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0067.273] GetProcessHeap () returned 0x3150000 [0067.273] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.274] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad4389d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0067.279] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad4389d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.279] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad4389d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.280] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0067.280] GetProcessHeap () returned 0x3150000 [0067.281] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.281] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad4389d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0067.281] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0067.282] GetProcessHeap () returned 0x3150000 [0067.282] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.285] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI79E2~1.0_X")) returned 1 [0067.286] GetProcessHeap () returned 0x3150000 [0067.286] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0067.296] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.297] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7eee2de1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7eee2de1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7cf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0067.297] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7eee2de1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7eee2de1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0067.297] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ef09035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5edb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ef09035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0067.298] GetProcessHeap () returned 0x3150000 [0067.298] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ef09035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5edb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ef09035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0067.301] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ef09035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5edb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ef09035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.302] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef09035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7ef554ec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7ef554ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1 [0067.302] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef09035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7ef554ec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7ef554ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0 [0067.302] FindClose (in: hFindFile=0x57d20b8 | out: hFindFile=0x57d20b8) returned 1 [0067.303] GetProcessHeap () returned 0x3150000 [0067.303] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.304] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7ef09035, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7ef09035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2995, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0067.304] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f2d055d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6bff9c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0067.305] GetProcessHeap () returned 0x3150000 [0067.305] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f2d055d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6bff9c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0067.313] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f2d055d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6bff9c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.314] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2d055d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f2d055d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f2d055d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.scale-100.png", cAlternateFileName="")) returned 1 [0067.315] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2f67b6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f2f67b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f2f67b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0067.316] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2f67b6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f2f67b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f2f67b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0067.317] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f31ca10, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f31ca10, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f31ca10, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-16.png", cAlternateFileName="")) returned 1 [0067.317] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f31ca10, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f31ca10, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f31ca10, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-16_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.317] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f342c6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f342c6e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f342c6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-16_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.319] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f342c6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f342c6e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f342c6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-16_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.320] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f368ec7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f368ec7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f368ec7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-16_contrast-black.png", cAlternateFileName="")) returned 1 [0067.320] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f368ec7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f368ec7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f368ec7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-16_contrast-white.png", cAlternateFileName="")) returned 1 [0067.320] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f38f120, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f38f120, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f38f120, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x135, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-20.png", cAlternateFileName="")) returned 1 [0067.321] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f38f120, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f38f120, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f38f120, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x135, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-20_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.321] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3b537e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f3b537e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f3b537e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x135, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-20_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.322] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3b537e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f3b537e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f3b537e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-20_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.322] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f3b537e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f3b537e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f3b537e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x135, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-20_contrast-black.png", cAlternateFileName="")) returned 1 [0067.323] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f433724, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f433724, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f433724, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-20_contrast-white.png", cAlternateFileName="")) returned 1 [0067.323] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4599a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f4599a7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f4599a7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-24.png", cAlternateFileName="")) returned 1 [0067.324] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4599a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f4599a7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f4599a7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-24_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.325] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4599a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f4599a7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f4599a7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-24_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.328] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4d3c2c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f4d3c2c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f4d3c2c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-24_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.329] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4f9e85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f4f9e85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f4f9e85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-24_contrast-black.png", cAlternateFileName="")) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4f9e85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f4f9e85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f4f9e85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-24_contrast-white.png", cAlternateFileName="")) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4f9e85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f4f9e85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f4f9e85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-256.png", cAlternateFileName="")) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5251df, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f529f5c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f529f5c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-256_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f52c2d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f52c2d5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f52c2d5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-256_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f52c2d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f52c2d5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f52c2d5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-256_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f52c2d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f52c2d5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f52c2d5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xba1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-256_contrast-black.png", cAlternateFileName="")) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f52c2d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f552554, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f552554, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-256_contrast-white.png", cAlternateFileName="")) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f552554, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f552554, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f552554, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-30.png", cAlternateFileName="")) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f552554, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f552554, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f552554, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-30_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.331] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f552554, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f552554, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f552554, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-30_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5787ad, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f5787ad, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f5787ad, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-30_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5787ad, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f5787ad, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f5787ad, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-30_contrast-black.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5787ad, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f5787ad, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f5787ad, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-30_contrast-white.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5787ad, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f5787ad, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f5787ad, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-32.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f59ea0b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f59ea0b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f59ea0b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-32_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f59ea0b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f5f1c49, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f5f1c49, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-32_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f5f1c49, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f5f1c49, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f5f1c49, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-32_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f617ecd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f617ecd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f617ecd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-32_contrast-black.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f617ecd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f617ecd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f617ecd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-32_contrast-white.png", cAlternateFileName="")) returned 1 [0067.332] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f617ecd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f617ecd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f617ecd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-36.png", cAlternateFileName="")) returned 1 [0067.333] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f63e12b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f63e12b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f63e12b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-36_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.333] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f63e12b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f63e12b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f63e12b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-36_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f63e12b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f63e12b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f63e12b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-36_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f63e12b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f63e12b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f63e12b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-36_contrast-black.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f664388, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f664388, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f664388, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-36_contrast-white.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f68a5dd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f68a5dd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f68a5dd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-40.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f68a5dd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f6b083b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f6b083b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-40_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f6b083b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f6b083b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f6b083b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-40_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f6b083b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f6b083b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f6b083b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-40_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f6b083b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f6b083b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f6b083b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-40_contrast-black.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f6d6a94, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f6d6a94, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f6d6a94, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-40_contrast-white.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f6d6a94, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f6d6a94, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f6d6a94, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-48.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f6d6a94, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f6d6a94, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f6d6a94, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-48_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f6fccee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f6fccee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f6fccee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-48_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f6fccee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f6fccee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f6fccee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x23b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-48_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.334] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f6fccee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f6fccee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f6fccee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-48_contrast-black.png", cAlternateFileName="")) returned 1 [0067.335] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f6fccee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f6fccee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f6fccee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x23b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-48_contrast-white.png", cAlternateFileName="")) returned 1 [0067.335] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f722f4b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f74f7c1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f74f7c1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-60.png", cAlternateFileName="")) returned 1 [0067.335] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f74f7c1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f74f7c1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f74f7c1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-60_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.335] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f74f7c1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f74f7c1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f74f7c1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-60_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f775a1a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f775a1a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f775a1a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-60_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f775a1a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f775a1a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f775a1a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-60_contrast-black.png", cAlternateFileName="")) returned 1 [0067.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f775a1a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f775a1a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f775a1a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-60_contrast-white.png", cAlternateFileName="")) returned 1 [0067.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f79bc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f79bc78, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f79bc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-64.png", cAlternateFileName="")) returned 1 [0067.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f79bc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f79bc78, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f79bc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-64_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f79bc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f79bc78, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f79bc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-64_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f7c1ed1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f7c1ed1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f7c1ed1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-64_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f7c1ed1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f7c1ed1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f7c1ed1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-64_contrast-black.png", cAlternateFileName="")) returned 1 [0067.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f7c1ed1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f7c1ed1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f7c1ed1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-64_contrast-white.png", cAlternateFileName="")) returned 1 [0067.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f7c1ed1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f7c1ed1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f7c1ed1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x20d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-72.png", cAlternateFileName="")) returned 1 [0067.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f7e812b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f7e812b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f7e812b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x20d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-72_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f7e812b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f7e812b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f7e812b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x20d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-72_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f7e812b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f7e812b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f7e812b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-72_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f7e812b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f7e812b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f7e812b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x20d, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-72_contrast-black.png", cAlternateFileName="")) returned 1 [0067.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f80e388, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f80e388, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f80e388, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-72_contrast-white.png", cAlternateFileName="")) returned 1 [0067.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f80e388, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f80e388, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f80e388, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-80.png", cAlternateFileName="")) returned 1 [0067.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f80e388, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f80e388, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f80e388, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-80_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f80e388, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f80e388, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f80e388, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-80_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f80e388, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f80e388, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f80e388, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x385, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-80_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.338] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f80e388, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8345e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8345e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-80_contrast-black.png", cAlternateFileName="")) returned 1 [0067.338] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8345e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8345e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8345e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x385, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-80_contrast-white.png", cAlternateFileName="")) returned 1 [0067.338] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8345e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8345e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8345e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-96.png", cAlternateFileName="")) returned 1 [0067.338] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8345e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8345e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8345e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-96_altform-unplated.png", cAlternateFileName="")) returned 1 [0067.338] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8345e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8345e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8345e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-96_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0067.338] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f85a840, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f85a840, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f85a840, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-96_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0067.338] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f85a840, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f85a840, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f85a840, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-96_contrast-black.png", cAlternateFileName="")) returned 1 [0067.338] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f85a840, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f85a840, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f85a840, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.targetsize-96_contrast-white.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f85a840, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f85a840, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f85a840, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x719, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedLargeTile.scale-100.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f85a840, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f85a840, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f85a840, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x719, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedLargeTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f880a99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f880a99, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f880a99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x823, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedLargeTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f880a99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f880a99, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f880a99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedMedTile.scale-100.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f880a99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f880a99, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f880a99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedMedTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f880a99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f880a99, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f880a99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedMedTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f880a99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f880a99, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f880a99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedSmallTile.scale-100.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8a6cf2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8a6cf2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8a6cf2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedSmallTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8a6cf2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8a6cf2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8a6cf2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedSmallTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8a6cf2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8a6cf2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8a6cf2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedSplash.scale-100.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8a6cf2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8a6cf2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8a6cf2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedSplash.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8a6cf2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8a6cf2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8a6cf2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4266, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedSplash.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8ccf50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8ccf50, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8ccf50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedStoreLogo.scale-100.png", cAlternateFileName="")) returned 1 [0067.339] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8ccf50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8ccf50, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8ccf50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedStoreLogo.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0067.340] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8ccf50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8ccf50, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8ccf50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedStoreLogo.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0067.340] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8ccf50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8f31a9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedWideTile.scale-100.png", cAlternateFileName="")) returned 1 [0067.340] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8f31a9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedWideTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0067.340] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8f31a9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedWideTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0067.340] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8f31a9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedWideTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 0 [0067.340] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0067.341] GetProcessHeap () returned 0x3150000 [0067.341] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.341] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8f31a9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1 [0067.341] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c0da4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0067.341] GetProcessHeap () returned 0x3150000 [0067.341] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c0da4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0067.341] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c0da4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.341] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c1a05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop", cAlternateFileName="")) returned 1 [0067.342] GetProcessHeap () returned 0x3150000 [0067.342] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c1a05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0067.343] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c1a05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.343] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c20a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0067.343] GetProcessHeap () returned 0x3150000 [0067.343] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c20a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0067.344] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c20a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.344] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f919407, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f42, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_accessibility.xml", cAlternateFileName="")) returned 1 [0067.344] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f919407, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2953, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_getconnected.xml", cAlternateFileName="")) returned 1 [0067.344] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f919407, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_narrator.xml", cAlternateFileName="")) returned 1 [0067.344] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f919407, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_speechrecognition.xml", cAlternateFileName="")) returned 1 [0067.344] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f919407, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1171, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 1 [0067.344] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f919407, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1171, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 0 [0067.344] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0067.344] GetProcessHeap () returned 0x3150000 [0067.344] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.344] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c24fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0067.344] GetProcessHeap () returned 0x3150000 [0067.344] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c24fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0067.345] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c24fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.345] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f93f661, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_accessibility.xml", cAlternateFileName="")) returned 1 [0067.345] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f93f661, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f93f661, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2937, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_getconnected.xml", cAlternateFileName="")) returned 1 [0067.345] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f93f661, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f93f661, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_narrator.xml", cAlternateFileName="")) returned 1 [0067.345] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f93f661, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f93f661, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_speechrecognition.xml", cAlternateFileName="")) returned 1 [0067.345] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f93f661, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x115f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 1 [0067.345] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f93f661, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x115f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 0 [0067.345] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0067.345] GetProcessHeap () returned 0x3150000 [0067.345] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.345] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c24fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0067.345] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0067.345] GetProcessHeap () returned 0x3150000 [0067.345] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.346] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2a52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="holoLens", cAlternateFileName="")) returned 1 [0067.346] GetProcessHeap () returned 0x3150000 [0067.346] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2a52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0067.346] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2a52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.347] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2f47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0067.347] GetProcessHeap () returned 0x3150000 [0067.347] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.347] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2f47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0067.348] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2f47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.348] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_use.xml", cAlternateFileName="")) returned 1 [0067.348] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_wifi.xml", cAlternateFileName="")) returned 1 [0067.348] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 1 [0067.348] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 0 [0067.348] FindClose (in: hFindFile=0x57d22b8 | out: hFindFile=0x57d22b8) returned 1 [0067.348] GetProcessHeap () returned 0x3150000 [0067.348] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.348] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2f47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0067.348] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0067.348] GetProcessHeap () returned 0x3150000 [0067.348] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.377] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c3363, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0067.377] GetProcessHeap () returned 0x3150000 [0067.377] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c3363, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0067.378] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c3363, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.378] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c39d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0067.378] GetProcessHeap () returned 0x3150000 [0067.378] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c39d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0067.379] FindNextFileW (in: hFindFile=0x57d1eb8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c39d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.379] FindNextFileW (in: hFindFile=0x57d1eb8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png", cAlternateFileName="")) returned 1 [0067.379] FindNextFileW (in: hFindFile=0x57d1eb8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="winlogo.png", cAlternateFileName="")) returned 1 [0067.379] FindNextFileW (in: hFindFile=0x57d1eb8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="winlogo.png", cAlternateFileName="")) returned 0 [0067.379] FindClose (in: hFindFile=0x57d1eb8 | out: hFindFile=0x57d1eb8) returned 1 [0067.380] GetProcessHeap () returned 0x3150000 [0067.380] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.380] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c39d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0067.380] FindClose (in: hFindFile=0x57d1e38 | out: hFindFile=0x57d1e38) returned 1 [0067.380] GetProcessHeap () returned 0x3150000 [0067.380] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.380] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4278, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mobile", cAlternateFileName="")) returned 1 [0067.380] GetProcessHeap () returned 0x3150000 [0067.380] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4278, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0067.381] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4278, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.381] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4ac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0067.381] GetProcessHeap () returned 0x3150000 [0067.381] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4ac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0067.382] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4ac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.382] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_getconnected.xml", cAlternateFileName="")) returned 1 [0067.382] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 1 [0067.382] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 0 [0067.383] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0067.383] GetProcessHeap () returned 0x3150000 [0067.383] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.383] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c5109, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0067.383] GetProcessHeap () returned 0x3150000 [0067.383] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.383] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c5109, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0067.383] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c5109, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.383] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_getconnected.xml", cAlternateFileName="")) returned 1 [0067.383] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 1 [0067.383] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 0 [0067.383] FindClose (in: hFindFile=0x57d1c78 | out: hFindFile=0x57d1c78) returned 1 [0067.383] GetProcessHeap () returned 0x3150000 [0067.384] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.384] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c5109, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0067.384] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0067.384] GetProcessHeap () returned 0x3150000 [0067.384] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.385] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c57e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="surfaceHub", cAlternateFileName="SURFAC~1")) returned 1 [0067.385] GetProcessHeap () returned 0x3150000 [0067.385] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.385] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c57e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0067.385] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c57e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.385] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c60ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0067.385] GetProcessHeap () returned 0x3150000 [0067.385] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.386] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\en-GB\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c60ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0067.386] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c60ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.386] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_getconnected.xml", cAlternateFileName="")) returned 1 [0067.386] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9fe269, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9fe269, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 1 [0067.387] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9fe269, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9fe269, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 0 [0067.387] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0067.387] GetProcessHeap () returned 0x3150000 [0067.387] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.387] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9fe269, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c6700, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa28bd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0067.387] GetProcessHeap () returned 0x3150000 [0067.387] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.387] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\surfaceHub\\en-US\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9fe269, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c6700, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa28bd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0067.388] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9fe269, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c6700, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa28bd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.388] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9fe269, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9fe269, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_getconnected.xml", cAlternateFileName="")) returned 1 [0067.388] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa28bd5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa28bd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa28bd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 1 [0067.388] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa28bd5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa28bd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa28bd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 0 [0067.388] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0067.388] GetProcessHeap () returned 0x3150000 [0067.388] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.388] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9fe269, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c6700, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa28bd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0067.388] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0067.388] GetProcessHeap () returned 0x3150000 [0067.388] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.389] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c57e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9fe269, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="surfaceHub", cAlternateFileName="SURFAC~1")) returned 0 [0067.389] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0067.389] GetProcessHeap () returned 0x3150000 [0067.389] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.389] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa28bd5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa28bd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa28bd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CPub.BackgroundTasks.winmd", cAlternateFileName="")) returned 1 [0067.390] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa4ee54, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa4ee54, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CPub.SkuInterop.winmd", cAlternateFileName="")) returned 1 [0067.390] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad69af3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0067.390] GetProcessHeap () returned 0x3150000 [0067.390] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad69af3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0067.390] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad69af3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.390] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad69af3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.390] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0067.390] GetProcessHeap () returned 0x3150000 [0067.390] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.390] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c7513, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa750b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0067.390] GetProcessHeap () returned 0x3150000 [0067.390] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.390] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c7513, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa750b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0067.391] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c7513, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa750b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.391] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa750b2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa750b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2e018, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetSMDL2.ttf", cAlternateFileName="")) returned 1 [0067.391] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa750b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78e843, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TopicPage", cAlternateFileName="TOPICP~1")) returned 1 [0067.391] GetProcessHeap () returned 0x3150000 [0067.391] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.391] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa750b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78e843, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0067.394] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa750b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78e843, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa750b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa750b2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa750b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="core.css", cAlternateFileName="")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x505c, dwReserved0=0x0, dwReserved1=0x0, cFileName="core.js", cAlternateFileName="")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="core.xslt", cAlternateFileName="")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_ltr.css", cAlternateFileName="")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_rtl.css", cAlternateFileName="")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbf4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="directionalnavigation-1.0.0.0.js", cAlternateFileName="")) returned 1 [0067.394] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78f63a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0067.394] GetProcessHeap () returned 0x3150000 [0067.394] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78f63a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0067.395] FindNextFileW (in: hFindFile=0x57d1ff8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78f63a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.395] FindNextFileW (in: hFindFile=0x57d1ff8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fac1569, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x916, dwReserved0=0x0, dwReserved1=0x0, cFileName="playbutton-rollover.png", cAlternateFileName="")) returned 1 [0067.395] FindNextFileW (in: hFindFile=0x57d1ff8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="playbutton.png", cAlternateFileName="")) returned 1 [0067.395] FindNextFileW (in: hFindFile=0x57d1ff8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="playbutton.png", cAlternateFileName="")) returned 0 [0067.396] FindClose (in: hFindFile=0x57d1ff8 | out: hFindFile=0x57d1ff8) returned 1 [0067.396] GetProcessHeap () returned 0x3150000 [0067.396] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.396] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78fdf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerJS", cAlternateFileName="PARTNE~1")) returned 1 [0067.396] GetProcessHeap () returned 0x3150000 [0067.396] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78fdf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0067.396] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78fdf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.396] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fac1569, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4518, dwReserved0=0x0, dwReserved1=0x0, cFileName="retailDemo.js", cAlternateFileName="")) returned 1 [0067.397] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fac1569, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4518, dwReserved0=0x0, dwReserved1=0x0, cFileName="retailDemo.js", cAlternateFileName="")) returned 0 [0067.397] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0067.397] GetProcessHeap () returned 0x3150000 [0067.397] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.397] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78fdf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerJS", cAlternateFileName="PARTNE~1")) returned 0 [0067.397] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0067.397] GetProcessHeap () returned 0x3150000 [0067.397] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.398] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa750b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78e843, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TopicPage", cAlternateFileName="TOPICP~1")) returned 0 [0067.398] FindClose (in: hFindFile=0x57d1cf8 | out: hFindFile=0x57d1cf8) returned 1 [0067.398] GetProcessHeap () returned 0x3150000 [0067.398] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.398] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa4ee54, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa4ee54, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x206c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0067.398] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fac1569, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkuInterop.dll", cAlternateFileName="")) returned 1 [0067.398] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fac1569, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.dll", cAlternateFileName="")) returned 1 [0067.398] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fb59ed3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fb59ed3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.winmd", cAlternateFileName="")) returned 1 [0067.398] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fb59ed3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fdbc483, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fdbc483, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x63c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhatsNew.Store.dll", cAlternateFileName="")) returned 1 [0067.398] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fdbc483, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fdbc483, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fdbc483, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhatsNew.Store.exe", cAlternateFileName="")) returned 1 [0067.399] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0140b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5ed36f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1 [0067.399] GetProcessHeap () returned 0x3150000 [0067.399] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.399] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0140b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5ed36f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0067.399] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0140b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5ed36f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.399] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f0140b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f11f133, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f11f133, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2985, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1 [0067.399] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2aa2da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f2aa2da, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1 [0067.399] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2aa2da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f2aa2da, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0 [0067.399] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0067.399] GetProcessHeap () returned 0x3150000 [0067.399] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.399] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0140b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5ed36f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0 [0067.399] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0067.400] GetProcessHeap () returned 0x3150000 [0067.400] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.400] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI5BB5~1.0_N")) returned 1 [0067.400] GetProcessHeap () returned 0x3150000 [0067.400] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0067.403] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.403] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28851bc4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28851bc4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28851bc4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0067.403] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab841b4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x287b925a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0067.403] GetProcessHeap () returned 0x3150000 [0067.403] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab841b4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x287b925a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0067.404] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab841b4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x287b925a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.404] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x287df4b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x287df4b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4246, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1 [0067.404] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x287df4b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x287df4b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4246, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0 [0067.404] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0067.404] GetProcessHeap () returned 0x3150000 [0067.404] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.404] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28851bc4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28877e22, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28877e22, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0067.404] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0067.405] GetProcessHeap () returned 0x3150000 [0067.405] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.405] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0067.406] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.406] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0067.406] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0067.406] GetProcessHeap () returned 0x3150000 [0067.406] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.406] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0067.406] FindClose (in: hFindFile=0x57d1cf8 | out: hFindFile=0x57d1cf8) returned 1 [0067.406] GetProcessHeap () returned 0x3150000 [0067.406] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.407] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a48b6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe", cAlternateFileName="MID6EE~1.SCA")) returned 1 [0067.407] GetProcessHeap () returned 0x3150000 [0067.407] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a48b6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0067.409] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a48b6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.409] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29a6edc8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29a6edc8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29a6edc8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1649, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0067.409] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29a48b6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29a48b6f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29a48b6f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0067.409] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29a6edc8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29a95021, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29a95021, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2996, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0067.409] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a95021, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9559ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x29c3c6c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0067.410] GetProcessHeap () returned 0x3150000 [0067.410] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a95021, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9559ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x29c3c6c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0067.469] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a95021, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9559ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x29c3c6c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0067.469] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29a95021, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29a95021, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29a95021, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BadgeLogo.scale-150.png", cAlternateFileName="")) returned 1 [0067.469] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29a95021, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29a95021, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29a95021, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x323, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logo.scale-150.png", cAlternateFileName="")) returned 1 [0067.469] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29a95021, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29abb27f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29abb27f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmallLogo.scale-150.png", cAlternateFileName="")) returned 1 [0067.470] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29abb27f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29abb27f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29abb27f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square71x71Logo.scale-150.png", cAlternateFileName="")) returned 1 [0067.470] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29abb27f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29abb27f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29abb27f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="starttile.dualsim1.sad.scale-150.png", cAlternateFileName="")) returned 1 [0067.474] GetProcessHeap () returned 0x3150000 [0067.474] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.474] GetProcessHeap () returned 0x3150000 [0067.474] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8c685e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0067.476] GetProcessHeap () returned 0x3150000 [0067.476] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.476] GetProcessHeap () returned 0x3150000 [0067.476] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.477] GetProcessHeap () returned 0x3150000 [0067.477] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2889e07b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0067.481] GetProcessHeap () returned 0x3150000 [0067.481] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2891078c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9bb295, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2891078c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0067.481] GetProcessHeap () returned 0x3150000 [0067.481] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.482] GetProcessHeap () returned 0x3150000 [0067.482] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2895cc43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb21004, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28bc9f4c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0067.526] GetProcessHeap () returned 0x3150000 [0067.526] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289a90fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb2233c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289a90fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0067.527] GetProcessHeap () returned 0x3150000 [0067.527] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.527] GetProcessHeap () returned 0x3150000 [0067.527] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28a67cbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb22dfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28a67cbd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0067.527] GetProcessHeap () returned 0x3150000 [0067.527] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.528] GetProcessHeap () returned 0x3150000 [0067.528] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.529] GetProcessHeap () returned 0x3150000 [0067.529] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfbac0b62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbac0b62, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0067.529] GetProcessHeap () returned 0x3150000 [0067.529] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.529] GetProcessHeap () returned 0x3150000 [0067.529] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb25901, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2993daf0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0067.569] GetProcessHeap () returned 0x3150000 [0067.569] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.569] GetProcessHeap () returned 0x3150000 [0067.569] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9baa69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0067.569] GetProcessHeap () returned 0x3150000 [0067.569] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.570] GetProcessHeap () returned 0x3150000 [0067.570] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.571] GetProcessHeap () returned 0x3150000 [0067.571] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac06201d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0067.573] GetProcessHeap () returned 0x3150000 [0067.573] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac08827b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb9e6bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac08827b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0067.574] GetProcessHeap () returned 0x3150000 [0067.574] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.574] GetProcessHeap () returned 0x3150000 [0067.574] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0067.575] GetProcessHeap () returned 0x3150000 [0067.575] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.575] GetProcessHeap () returned 0x3150000 [0067.575] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.576] GetProcessHeap () returned 0x3150000 [0067.576] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0067.576] GetProcessHeap () returned 0x3150000 [0067.576] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba0d3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0067.577] GetProcessHeap () returned 0x3150000 [0067.577] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.577] GetProcessHeap () returned 0x3150000 [0067.577] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba158a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0067.577] GetProcessHeap () returned 0x3150000 [0067.578] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba219f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac526b7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0067.578] GetProcessHeap () returned 0x3150000 [0067.578] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.578] GetProcessHeap () returned 0x3150000 [0067.578] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\Images\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba2cef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac54cddc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0067.578] GetProcessHeap () returned 0x3150000 [0067.578] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\Images\\Tiles\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac54cddc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabbf3417, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0067.581] GetProcessHeap () returned 0x3150000 [0067.581] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.581] GetProcessHeap () returned 0x3150000 [0067.581] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.581] GetProcessHeap () returned 0x3150000 [0067.581] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\Viewer\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac59928e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabbf429c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac657e5b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0067.582] GetProcessHeap () returned 0x3150000 [0067.582] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.582] GetProcessHeap () returned 0x3150000 [0067.582] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.583] GetProcessHeap () returned 0x3150000 [0067.583] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xabbf4c99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0067.583] GetProcessHeap () returned 0x3150000 [0067.583] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.583] GetProcessHeap () returned 0x3150000 [0067.583] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba02f9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0067.586] GetProcessHeap () returned 0x3150000 [0067.586] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.586] GetProcessHeap () returned 0x3150000 [0067.586] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.586] GetProcessHeap () returned 0x3150000 [0067.586] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62a7e361, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0067.800] GetProcessHeap () returned 0x3150000 [0067.800] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4070c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62aca818, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0067.801] GetProcessHeap () returned 0x3150000 [0067.801] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.801] GetProcessHeap () returned 0x3150000 [0067.801] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.801] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc41746, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0067.803] GetProcessHeap () returned 0x3150000 [0067.803] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.803] GetProcessHeap () returned 0x3150000 [0067.803] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc423fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0067.804] GetProcessHeap () returned 0x3150000 [0067.804] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.804] GetProcessHeap () returned 0x3150000 [0067.804] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0067.805] GetProcessHeap () returned 0x3150000 [0067.805] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.805] GetProcessHeap () returned 0x3150000 [0067.805] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4357d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x63720995, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0067.805] GetProcessHeap () returned 0x3150000 [0067.805] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4416c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0067.806] GetProcessHeap () returned 0x3150000 [0067.806] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.811] GetProcessHeap () returned 0x3150000 [0067.811] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.812] GetProcessHeap () returned 0x3150000 [0067.812] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc44b63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0067.812] GetProcessHeap () returned 0x3150000 [0067.812] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.812] GetProcessHeap () returned 0x3150000 [0067.812] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.812] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc45469, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x662a39a5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0067.813] GetProcessHeap () returned 0x3150000 [0067.813] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.813] GetProcessHeap () returned 0x3150000 [0067.813] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x663d4c5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabd372f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6644736d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0067.815] GetProcessHeap () returned 0x3150000 [0067.815] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.815] GetProcessHeap () returned 0x3150000 [0067.815] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.815] GetProcessHeap () returned 0x3150000 [0067.815] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0067.817] GetProcessHeap () returned 0x3150000 [0067.817] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabdaf1a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628da999, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0067.818] GetProcessHeap () returned 0x3150000 [0067.818] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.818] GetProcessHeap () returned 0x3150000 [0067.818] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0067.818] GetProcessHeap () returned 0x3150000 [0067.818] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.818] GetProcessHeap () returned 0x3150000 [0067.818] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.819] GetProcessHeap () returned 0x3150000 [0067.819] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390dfd83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0067.821] GetProcessHeap () returned 0x3150000 [0067.821] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe0794e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0067.821] GetProcessHeap () returned 0x3150000 [0067.822] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\Livetiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39211056, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe5a941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x392372b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0067.824] GetProcessHeap () returned 0x3150000 [0067.824] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.824] GetProcessHeap () returned 0x3150000 [0067.824] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.824] GetProcessHeap () returned 0x3150000 [0067.824] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0067.826] GetProcessHeap () returned 0x3150000 [0067.826] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.826] GetProcessHeap () returned 0x3150000 [0067.826] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.827] GetProcessHeap () returned 0x3150000 [0067.827] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0067.829] GetProcessHeap () returned 0x3150000 [0067.829] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabec308c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33798b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0067.830] GetProcessHeap () returned 0x3150000 [0067.830] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.830] GetProcessHeap () returned 0x3150000 [0067.830] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.830] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96c435e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0067.830] GetProcessHeap () returned 0x3150000 [0067.830] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.831] GetProcessHeap () returned 0x3150000 [0067.831] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0067.838] GetProcessHeap () returned 0x3150000 [0067.838] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0067.838] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34052404, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0067.840] GetProcessHeap () returned 0x3150000 [0067.840] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340ead73, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf3049c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x340ead73, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0067.841] GetProcessHeap () returned 0x3150000 [0067.841] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.841] GetProcessHeap () returned 0x3150000 [0067.841] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Awards\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342422a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf30abf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342422a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0067.841] GetProcessHeap () returned 0x3150000 [0067.841] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.841] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Awards\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342422a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf96d1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342b49b5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0067.924] GetProcessHeap () returned 0x3150000 [0067.924] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.925] GetProcessHeap () returned 0x3150000 [0067.925] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.925] GetProcessHeap () returned 0x3150000 [0067.925] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.926] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342dac13, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf9793f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x342dac13, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0067.927] GetProcessHeap () returned 0x3150000 [0067.927] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342dac13, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabffc808, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0067.929] GetProcessHeap () returned 0x3150000 [0067.929] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Animation\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342dac13, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac04346d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x344583a2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0067.931] GetProcessHeap () returned 0x3150000 [0067.931] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.931] GetProcessHeap () returned 0x3150000 [0067.931] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Audio\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3447e5fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac043e7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3447e5fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0067.932] GetProcessHeap () returned 0x3150000 [0067.932] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.932] GetProcessHeap () returned 0x3150000 [0067.932] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Calendar\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x344f0d0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac044536, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x344f0d0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0067.932] GetProcessHeap () returned 0x3150000 [0067.932] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.932] GetProcessHeap () returned 0x3150000 [0067.932] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.932] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Perfect\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3453d1c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac044a68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x345651d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0067.933] GetProcessHeap () returned 0x3150000 [0067.933] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.933] GetProcessHeap () returned 0x3150000 [0067.933] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Popups\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3458b455, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac0bb1e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3464a018, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0067.934] GetProcessHeap () returned 0x3150000 [0067.934] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Popups\\Upsell\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3464a018, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac12f3ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34670276, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0067.937] GetProcessHeap () returned 0x3150000 [0067.937] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.937] GetProcessHeap () returned 0x3150000 [0067.937] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.937] GetProcessHeap () returned 0x3150000 [0067.937] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\PrizeHistory\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34670276, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18e78c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0067.940] GetProcessHeap () returned 0x3150000 [0067.940] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.940] GetProcessHeap () returned 0x3150000 [0067.940] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\ProgressBar\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34708be4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18f047, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34708be4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0067.941] GetProcessHeap () returned 0x3150000 [0067.941] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.941] GetProcessHeap () returned 0x3150000 [0067.941] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.DailyChallenges\\Assets\\Tab\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3472fed7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac18f99f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3472fed7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0067.941] GetProcessHeap () returned 0x3150000 [0067.941] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.941] GetProcessHeap () returned 0x3150000 [0067.941] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.942] GetProcessHeap () returned 0x3150000 [0067.942] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.942] GetProcessHeap () returned 0x3150000 [0067.942] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.News\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac190436, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3477c3bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0067.942] GetProcessHeap () returned 0x3150000 [0067.942] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.News\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3477c3bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac1fc576, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0067.944] GetProcessHeap () returned 0x3150000 [0067.945] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.945] GetProcessHeap () returned 0x3150000 [0067.945] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.945] GetProcessHeap () returned 0x3150000 [0067.945] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac1fd71d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347a261b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0067.946] GetProcessHeap () returned 0x3150000 [0067.946] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac275cac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0067.947] GetProcessHeap () returned 0x3150000 [0067.947] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Animation\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347a261b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac318bc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x347eead2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0067.950] GetProcessHeap () returned 0x3150000 [0067.950] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.950] GetProcessHeap () returned 0x3150000 [0067.950] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Badges\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34814d2b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac3196ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34814d2b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0067.950] GetProcessHeap () returned 0x3150000 [0067.950] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.950] GetProcessHeap () returned 0x3150000 [0067.950] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Pin\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac319e44, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x348db826, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0067.951] GetProcessHeap () returned 0x3150000 [0067.951] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.951] GetProcessHeap () returned 0x3150000 [0067.951] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Sounds\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x348db826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac36e3cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34927cf5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0067.953] GetProcessHeap () returned 0x3150000 [0067.953] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.953] GetProcessHeap () returned 0x3150000 [0067.953] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.StarClub\\Assets\\Stripes\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac36f571, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0067.953] GetProcessHeap () returned 0x3150000 [0067.953] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0067.953] GetProcessHeap () returned 0x3150000 [0067.953] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.954] GetProcessHeap () returned 0x3150000 [0067.954] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.954] GetProcessHeap () returned 0x3150000 [0067.954] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Upsell\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac3703f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0067.955] GetProcessHeap () returned 0x3150000 [0067.955] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Upsell\\Default\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3499a434, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac371336, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3499a434, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0067.955] GetProcessHeap () returned 0x3150000 [0067.955] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0067.956] GetProcessHeap () returned 0x3150000 [0067.956] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0067.956] GetProcessHeap () returned 0x3150000 [0067.956] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0067.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac371ee7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0067.957] GetProcessHeap () returned 0x3150000 [0067.957] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0067.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac487abd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0067.958] GetProcessHeap () returned 0x3150000 [0067.958] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0067.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Buttons\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac488be1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a0cb16, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0067.959] GetProcessHeap () returned 0x3150000 [0067.959] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Buttons\\Back\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x349e68bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac489905, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x349e68bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0067.960] GetProcessHeap () returned 0x3150000 [0067.960] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0067.960] GetProcessHeap () returned 0x3150000 [0067.960] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0067.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Buttons\\Menu\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34a0cb16, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac52ad21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a32d6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0068.018] GetProcessHeap () returned 0x3150000 [0068.018] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0068.018] GetProcessHeap () returned 0x3150000 [0068.018] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.019] GetProcessHeap () returned 0x3150000 [0068.019] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\Hud\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34acb6c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac52b9f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34af1924, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0068.020] GetProcessHeap () returned 0x3150000 [0068.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.020] GetProcessHeap () returned 0x3150000 [0068.020] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Arkadium.Win10.Xaml.Toolkit\\Assets\\XboxControl\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34af1924, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac5cdd03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34b17b7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0068.023] GetProcessHeap () returned 0x3150000 [0068.023] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.023] GetProcessHeap () returned 0x3150000 [0068.023] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.024] GetProcessHeap () returned 0x3150000 [0068.024] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.024] GetProcessHeap () returned 0x3150000 [0068.024] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b17b7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac644067, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377f6ca3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0068.026] GetProcessHeap () returned 0x3150000 [0068.026] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Advertisement\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac645b09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34b64035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0068.027] GetProcessHeap () returned 0x3150000 [0068.027] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.027] GetProcessHeap () returned 0x3150000 [0068.027] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Audio\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34b64035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6cbcfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34c48e56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0068.029] GetProcessHeap () returned 0x3150000 [0068.029] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.029] GetProcessHeap () returned 0x3150000 [0068.029] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6cce12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x350306db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.031] GetProcessHeap () returned 0x3150000 [0068.031] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\challenge\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34c48e56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac779db7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34d56040, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0068.033] GetProcessHeap () returned 0x3150000 [0068.033] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.033] GetProcessHeap () returned 0x3150000 [0068.033] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\common\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34d56040, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac7e1fd7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34e610ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0068.035] GetProcessHeap () returned 0x3150000 [0068.035] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.035] GetProcessHeap () returned 0x3150000 [0068.035] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\freecell\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34e610ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac845f95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34e87318, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0068.037] GetProcessHeap () returned 0x3150000 [0068.037] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.037] GetProcessHeap () returned 0x3150000 [0068.037] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\klondike\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34ead571, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac8488db, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34ef9a28, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0068.040] GetProcessHeap () returned 0x3150000 [0068.040] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.040] GetProcessHeap () returned 0x3150000 [0068.040] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\pyramid\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34f1fc81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac8a1411, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34f97d43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0068.042] GetProcessHeap () returned 0x3150000 [0068.042] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.042] GetProcessHeap () returned 0x3150000 [0068.042] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\spider\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34f97d43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac8e55e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3500a487, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0068.044] GetProcessHeap () returned 0x3150000 [0068.044] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.044] GetProcessHeap () returned 0x3150000 [0068.044] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Awards\\tripeaks\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x350306db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac95908b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x350c904a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0068.046] GetProcessHeap () returned 0x3150000 [0068.046] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.046] GetProcessHeap () returned 0x3150000 [0068.046] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.047] GetProcessHeap () returned 0x3150000 [0068.047] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x350f002f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac95a2c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352c9059, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0068.049] GetProcessHeap () returned 0x3150000 [0068.049] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.050] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Deal\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x350f002f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac9df1ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3513c50b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0068.052] GetProcessHeap () returned 0x3150000 [0068.052] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.052] GetProcessHeap () returned 0x3150000 [0068.052] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\FullScreen\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3513c50b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca3dcfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35197d53, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.159] GetProcessHeap () returned 0x3150000 [0068.160] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.160] GetProcessHeap () returned 0x3150000 [0068.160] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.160] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\GiveUp\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35197d53, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca840b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x351bdfd6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0068.162] GetProcessHeap () returned 0x3150000 [0068.162] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.162] GetProcessHeap () returned 0x3150000 [0068.162] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.162] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Solve\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x351bdfd6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacad2aaa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35256944, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0068.164] GetProcessHeap () returned 0x3150000 [0068.164] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.165] GetProcessHeap () returned 0x3150000 [0068.165] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.165] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\TryAgain\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3527cb9e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacc01122, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352c9059, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0068.167] GetProcessHeap () returned 0x3150000 [0068.167] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.167] GetProcessHeap () returned 0x3150000 [0068.167] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Buttons\\Undo\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c9059, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacc863de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x352f22cf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0068.169] GetProcessHeap () returned 0x3150000 [0068.169] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.169] GetProcessHeap () returned 0x3150000 [0068.169] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.169] GetProcessHeap () returned 0x3150000 [0068.169] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.170] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3533dfe8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaccce3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x355540e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0068.171] GetProcessHeap () returned 0x3150000 [0068.171] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Icons\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35364241, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacccf58b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35364241, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0068.172] GetProcessHeap () returned 0x3150000 [0068.172] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.172] GetProcessHeap () returned 0x3150000 [0068.172] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.172] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\LobbyTiles\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x353b06f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacd36e5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x353d6951, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0068.174] GetProcessHeap () returned 0x3150000 [0068.174] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.174] GetProcessHeap () returned 0x3150000 [0068.174] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Popup\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x353fcbab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacd9987b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35495519, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0068.177] GetProcessHeap () returned 0x3150000 [0068.177] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.177] GetProcessHeap () returned 0x3150000 [0068.177] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\DailyChallenges\\Tile\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x355540e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacd9a8ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x355540e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0068.177] GetProcessHeap () returned 0x3150000 [0068.177] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.177] GetProcessHeap () returned 0x3150000 [0068.177] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.178] GetProcessHeap () returned 0x3150000 [0068.178] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Fireworks\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3557a33f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacd9b495, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x355a0598, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0068.179] GetProcessHeap () returned 0x3150000 [0068.179] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.179] GetProcessHeap () returned 0x3150000 [0068.179] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Fues\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x355c67f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace02661, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3576d4df, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0068.181] GetProcessHeap () returned 0x3150000 [0068.181] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.181] GetProcessHeap () returned 0x3150000 [0068.181] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GameEnd\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35793738, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace05649, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3582c0a2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0068.183] GetProcessHeap () returned 0x3150000 [0068.183] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.183] GetProcessHeap () returned 0x3150000 [0068.183] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35852300, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace066b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35f531bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0068.185] GetProcessHeap () returned 0x3150000 [0068.185] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\FreeCell\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35878559, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace07319, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35878559, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0068.186] GetProcessHeap () returned 0x3150000 [0068.186] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0068.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\FreeCell\\ResPacks\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35878559, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace07e04, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35878559, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0068.186] GetProcessHeap () returned 0x3150000 [0068.186] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0068.186] GetProcessHeap () returned 0x3150000 [0068.186] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.187] GetProcessHeap () returned 0x3150000 [0068.187] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Klondike\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3589e7b7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace08745, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3589e7b7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0068.188] GetProcessHeap () returned 0x3150000 [0068.188] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0068.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Klondike\\ResPacks\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3589e7b7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xace091ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3589e7b7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0068.188] GetProcessHeap () returned 0x3150000 [0068.188] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0068.188] GetProcessHeap () returned 0x3150000 [0068.188] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.189] GetProcessHeap () returned 0x3150000 [0068.189] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Localization\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x358c4a10, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1abf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35d3d0be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0068.193] GetProcessHeap () returned 0x3150000 [0068.193] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.193] GetProcessHeap () returned 0x3150000 [0068.193] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Particles\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35d3d0be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1b816, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35dd5a2c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0068.193] GetProcessHeap () returned 0x3150000 [0068.193] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.193] GetProcessHeap () returned 0x3150000 [0068.193] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Pyramid\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35dfbc86, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1c555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35e21edf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0068.193] GetProcessHeap () returned 0x3150000 [0068.193] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0068.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Pyramid\\ResPacks\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e21edf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1d153, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35e21edf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.194] GetProcessHeap () returned 0x3150000 [0068.194] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0068.194] GetProcessHeap () returned 0x3150000 [0068.194] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.194] GetProcessHeap () returned 0x3150000 [0068.194] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Spider\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e48142, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1dfdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35e6e396, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0068.195] GetProcessHeap () returned 0x3150000 [0068.195] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0068.195] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Spider\\ResPacks\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e48142, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1ef18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35e48142, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0068.195] GetProcessHeap () returned 0x3150000 [0068.195] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0068.195] GetProcessHeap () returned 0x3150000 [0068.195] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.196] GetProcessHeap () returned 0x3150000 [0068.196] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\Theme\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e6e396, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1f832, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35f2cf5e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.196] GetProcessHeap () returned 0x3150000 [0068.196] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.196] GetProcessHeap () returned 0x3150000 [0068.196] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\TriPeaks\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35f531bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf1fefc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35fc58cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0068.197] GetProcessHeap () returned 0x3150000 [0068.197] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0068.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\GamePlayAssets\\TriPeaks\\ResPacks\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35f531bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf20a89, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x35f531bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.284] GetProcessHeap () returned 0x3150000 [0068.284] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0068.284] GetProcessHeap () returned 0x3150000 [0068.284] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.285] GetProcessHeap () returned 0x3150000 [0068.285] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.285] GetProcessHeap () returned 0x3150000 [0068.285] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36011d7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacf21496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x363fa5db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0068.287] GetProcessHeap () returned 0x3150000 [0068.287] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\DailyChallenges\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36011d7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad048c46, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3605e236, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0068.291] GetProcessHeap () returned 0x3150000 [0068.291] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.291] GetProcessHeap () returned 0x3150000 [0068.291] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\FreeCell\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3605e236, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0b7bdb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360f6ba4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0068.293] GetProcessHeap () returned 0x3150000 [0068.293] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.293] GetProcessHeap () returned 0x3150000 [0068.294] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Klondike\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3611cdfe, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0ba445, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x361db9c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0068.296] GetProcessHeap () returned 0x3150000 [0068.296] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.296] GetProcessHeap () returned 0x3150000 [0068.296] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Pyramid\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36227e81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad119406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x362e6a44, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0068.298] GetProcessHeap () returned 0x3150000 [0068.298] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.298] GetProcessHeap () returned 0x3150000 [0068.298] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\Spider\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3630cca2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad1cdf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x363d4386, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0068.300] GetProcessHeap () returned 0x3150000 [0068.300] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.300] GetProcessHeap () returned 0x3150000 [0068.300] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\StarClub\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x363d4386, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad1ce7fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x363fa5db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0068.301] GetProcessHeap () returned 0x3150000 [0068.301] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.301] GetProcessHeap () returned 0x3150000 [0068.301] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\HowToPlay\\TriPeaks\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x363fa5db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad1d0ffd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3644e45a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0068.303] GetProcessHeap () returned 0x3150000 [0068.303] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.303] GetProcessHeap () returned 0x3150000 [0068.303] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.304] GetProcessHeap () returned 0x3150000 [0068.304] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x364746b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad239fed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3650d026, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0068.306] GetProcessHeap () returned 0x3150000 [0068.306] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.306] GetProcessHeap () returned 0x3150000 [0068.306] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Livetiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3650d026, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad2b592c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x365a5990, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0068.308] GetProcessHeap () returned 0x3150000 [0068.308] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.309] GetProcessHeap () returned 0x3150000 [0068.309] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\MainPage\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x365a5990, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3440cd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x365cbbe9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0068.311] GetProcessHeap () returned 0x3150000 [0068.311] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.311] GetProcessHeap () returned 0x3150000 [0068.311] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\MainPageState2\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x365cbbe9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad346b82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36664553, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0068.313] GetProcessHeap () returned 0x3150000 [0068.313] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.314] GetProcessHeap () returned 0x3150000 [0068.314] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\News\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36664553, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad34763e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36664553, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0068.315] GetProcessHeap () returned 0x3150000 [0068.315] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.315] GetProcessHeap () returned 0x3150000 [0068.315] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\OptInPopup\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3668a7b1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad348156, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3668a7b1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0068.315] GetProcessHeap () returned 0x3150000 [0068.315] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.315] GetProcessHeap () returned 0x3150000 [0068.315] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\PopUp\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x366b0a0a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad348e3e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x366b0a0a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0068.315] GetProcessHeap () returned 0x3150000 [0068.315] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.315] GetProcessHeap () returned 0x3150000 [0068.315] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.315] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\SampleHeader\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x366fcec2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad349c2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36723120, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0068.316] GetProcessHeap () returned 0x3150000 [0068.316] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.316] GetProcessHeap () returned 0x3150000 [0068.316] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\SplashScreen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36723120, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3af563, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36749379, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0068.318] GetProcessHeap () returned 0x3150000 [0068.318] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.318] GetProcessHeap () returned 0x3150000 [0068.318] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\StarClub\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3676f5d7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3b11e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36795830, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0068.320] GetProcessHeap () returned 0x3150000 [0068.320] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.320] GetProcessHeap () returned 0x3150000 [0068.320] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Statistics\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x367bba89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3b1c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x367e1ce3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0068.321] GetProcessHeap () returned 0x3150000 [0068.321] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.321] GetProcessHeap () returned 0x3150000 [0068.321] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Store\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36807f40, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad3b269d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36807f40, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0068.321] GetProcessHeap () returned 0x3150000 [0068.322] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.322] GetProcessHeap () returned 0x3150000 [0068.322] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemeCreation\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3682e19a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad463d9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36a24610, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0068.434] GetProcessHeap () returned 0x3150000 [0068.434] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemeCreation\\Effects\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x368c6b0d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad4dd181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36939219, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0068.437] GetProcessHeap () returned 0x3150000 [0068.437] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.437] GetProcessHeap () returned 0x3150000 [0068.437] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.437] GetProcessHeap () returned 0x3150000 [0068.437] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemeDownload\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a24610, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad4ddf83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36a4a88e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0068.438] GetProcessHeap () returned 0x3150000 [0068.438] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.438] GetProcessHeap () returned 0x3150000 [0068.438] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a4a88e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad4de80d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36c3a737, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0068.440] GetProcessHeap () returned 0x3150000 [0068.440] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.440] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\Backgrounds\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36a4a88e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad524849, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36abcfa3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0068.442] GetProcessHeap () returned 0x3150000 [0068.442] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.442] GetProcessHeap () returned 0x3150000 [0068.442] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.442] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\CardBacks\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36abcfa3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad56501d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36b09456, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0068.455] GetProcessHeap () returned 0x3150000 [0068.455] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.455] GetProcessHeap () returned 0x3150000 [0068.455] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.455] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\Effects\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36b2f6b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad565f3b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36c144d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.457] GetProcessHeap () returned 0x3150000 [0068.457] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.457] GetProcessHeap () returned 0x3150000 [0068.457] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.457] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\ThemePreview\\Themes\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36c3a737, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad603ea4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36cd309d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.460] GetProcessHeap () returned 0x3150000 [0068.460] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.460] GetProcessHeap () returned 0x3150000 [0068.460] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.460] GetProcessHeap () returned 0x3150000 [0068.460] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.461] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36cf92fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad604f5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x374f1a3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0068.462] GetProcessHeap () returned 0x3150000 [0068.462] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.463] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Aquarium\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36cf92fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad660916, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36db7ebd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0068.464] GetProcessHeap () returned 0x3150000 [0068.464] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0068.464] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Aquarium\\mask\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36db7ebd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad6bc21d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36e9cce3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0068.466] GetProcessHeap () returned 0x3150000 [0068.466] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0068.466] GetProcessHeap () returned 0x3150000 [0068.466] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.467] GetProcessHeap () returned 0x3150000 [0068.467] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Autumn\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36e9cce3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad6c0df3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36f5b8ab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0068.574] GetProcessHeap () returned 0x3150000 [0068.574] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0068.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Autumn\\mask\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36f5b8ab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad73344c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36fcdfbb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0068.577] GetProcessHeap () returned 0x3150000 [0068.577] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0068.577] GetProcessHeap () returned 0x3150000 [0068.577] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.578] GetProcessHeap () returned 0x3150000 [0068.578] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Beach\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36ff4214, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad77eea6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x370ff293, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0068.580] GetProcessHeap () returned 0x3150000 [0068.580] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0068.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Beach\\mask\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x370ff293, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7cec66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37197c02, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0068.583] GetProcessHeap () returned 0x3150000 [0068.583] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0068.583] GetProcessHeap () returned 0x3150000 [0068.583] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.583] GetProcessHeap () returned 0x3150000 [0068.583] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Classic\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x371bde5b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7d10a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3728a569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0068.585] GetProcessHeap () returned 0x3150000 [0068.585] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0068.586] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Classic\\mask\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3728a569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad8a1f96, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x372fcc79, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0068.588] GetProcessHeap () returned 0x3150000 [0068.588] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0068.588] GetProcessHeap () returned 0x3150000 [0068.588] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.588] GetProcessHeap () returned 0x3150000 [0068.588] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Fable\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x372fcc79, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad912c92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37399629, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.591] GetProcessHeap () returned 0x3150000 [0068.591] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.591] GetProcessHeap () returned 0x3150000 [0068.591] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Jumbo\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37399629, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad991296, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x374581f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0068.593] GetProcessHeap () returned 0x3150000 [0068.593] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0068.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Jumbo\\mask\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x374581f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xada1e8d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x374f1a3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0068.596] GetProcessHeap () returned 0x3150000 [0068.596] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0068.596] GetProcessHeap () returned 0x3150000 [0068.596] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.596] GetProcessHeap () returned 0x3150000 [0068.596] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Mobile\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x374f1a3e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xada1fcdb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x374f1a3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0068.597] GetProcessHeap () returned 0x3150000 [0068.597] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.597] GetProcessHeap () returned 0x3150000 [0068.597] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Western\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x374f1a3e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xada5d89c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x376785a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0068.598] GetProcessHeap () returned 0x3150000 [0068.598] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fd928 [0068.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Themes\\Western\\mask\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x374f1a3e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xada602f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37593788, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0068.601] GetProcessHeap () returned 0x3150000 [0068.601] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fd928 | out: hHeap=0x3150000) returned 1 [0068.601] GetProcessHeap () returned 0x3150000 [0068.601] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.601] GetProcessHeap () returned 0x3150000 [0068.601] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.602] GetProcessHeap () returned 0x3150000 [0068.602] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Tiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3769e802, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb15f48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x376c4a60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0068.605] GetProcessHeap () returned 0x3150000 [0068.605] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.605] GetProcessHeap () returned 0x3150000 [0068.605] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\Tournament\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x376ebbff, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1841a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377d0a4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0068.607] GetProcessHeap () returned 0x3150000 [0068.607] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.607] GetProcessHeap () returned 0x3150000 [0068.607] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\XboxControl\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x377d0a4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb19197, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377f6ca3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0068.607] GetProcessHeap () returned 0x3150000 [0068.607] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.607] GetProcessHeap () returned 0x3150000 [0068.607] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Assets\\XboxFlow\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x377f6ca3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb19d17, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x377f6ca3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.607] GetProcessHeap () returned 0x3150000 [0068.607] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.607] GetProcessHeap () returned 0x3150000 [0068.607] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.608] GetProcessHeap () returned 0x3150000 [0068.608] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.608] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Avatars\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37974437, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1ac8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37974437, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0068.609] GetProcessHeap () returned 0x3150000 [0068.609] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\Avatars\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37974437, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1bdb7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37974437, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0068.609] GetProcessHeap () returned 0x3150000 [0068.609] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.609] GetProcessHeap () returned 0x3150000 [0068.609] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.609] GetProcessHeap () returned 0x3150000 [0068.609] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdae86288, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xdae86288, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0068.610] GetProcessHeap () returned 0x3150000 [0068.610] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.610] GetProcessHeap () returned 0x3150000 [0068.610] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1ce25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37e86909, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0068.610] GetProcessHeap () returned 0x3150000 [0068.610] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1d39d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37e86909, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.610] GetProcessHeap () returned 0x3150000 [0068.610] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.752] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1d9b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37e86909, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0068.753] GetProcessHeap () returned 0x3150000 [0068.753] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0068.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb1de6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37ef901a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0068.753] GetProcessHeap () returned 0x3150000 [0068.753] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0068.754] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\Bin\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37e86909, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadb98b45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37ef901a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0068.756] GetProcessHeap () returned 0x3150000 [0068.756] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0068.756] GetProcessHeap () returned 0x3150000 [0068.756] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0068.756] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\SharpDXEngine\\Rendering\\Shaders\\Builtin\\HLSL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37ef901a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadbfe34d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37f709ad, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0068.758] GetProcessHeap () returned 0x3150000 [0068.758] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0068.758] GetProcessHeap () returned 0x3150000 [0068.758] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0068.759] GetProcessHeap () returned 0x3150000 [0068.759] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.759] GetProcessHeap () returned 0x3150000 [0068.759] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.759] GetProcessHeap () returned 0x3150000 [0068.759] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.760] GetProcessHeap () returned 0x3150000 [0068.760] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34110fcc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabf2fada, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3421c04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0068.764] GetProcessHeap () returned 0x3150000 [0068.764] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.764] GetProcessHeap () returned 0x3150000 [0068.764] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0068.764] GetProcessHeap () returned 0x3150000 [0068.764] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0068.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a98e846, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0068.766] GetProcessHeap () returned 0x3150000 [0068.766] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a9dacf8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadc94d2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6aa271af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0068.769] GetProcessHeap () returned 0x3150000 [0068.769] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.769] GetProcessHeap () returned 0x3150000 [0068.769] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb314296, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0068.770] GetProcessHeap () returned 0x3150000 [0068.770] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.770] GetProcessHeap () returned 0x3150000 [0068.770] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0068.771] GetProcessHeap () returned 0x3150000 [0068.771] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0068.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0068.772] GetProcessHeap () returned 0x3150000 [0068.772] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6c838, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69c2543c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0068.773] GetProcessHeap () returned 0x3150000 [0068.773] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.773] GetProcessHeap () returned 0x3150000 [0068.773] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb2ee04f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0068.774] GetProcessHeap () returned 0x3150000 [0068.774] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.774] GetProcessHeap () returned 0x3150000 [0068.774] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0068.774] GetProcessHeap () returned 0x3150000 [0068.774] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0068.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0068.776] GetProcessHeap () returned 0x3150000 [0068.776] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.776] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e3b535, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6eb7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69e3b535, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0068.777] GetProcessHeap () returned 0x3150000 [0068.777] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.777] GetProcessHeap () returned 0x3150000 [0068.777] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e879ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddf87aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69efa0fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.779] GetProcessHeap () returned 0x3150000 [0068.779] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.779] GetProcessHeap () returned 0x3150000 [0068.779] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\Microsoft.StickyNotes.Views\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddf973d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0068.779] GetProcessHeap () returned 0x3150000 [0068.779] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\Microsoft.StickyNotes.Views\\Images\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8a9a20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddfa4dd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8a9a20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0068.780] GetProcessHeap () returned 0x3150000 [0068.780] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.780] GetProcessHeap () returned 0x3150000 [0068.780] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.781] GetProcessHeap () returned 0x3150000 [0068.781] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcb2ee04f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd8b5b46d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd8b5b46d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.781] GetProcessHeap () returned 0x3150000 [0068.781] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.781] GetProcessHeap () returned 0x3150000 [0068.781] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a8cfc83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaddfb0cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a8cfc83, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0068.781] GetProcessHeap () returned 0x3150000 [0068.781] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.781] GetProcessHeap () returned 0x3150000 [0068.781] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.781] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e61793, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd6e3ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69e61793, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0068.782] GetProcessHeap () returned 0x3150000 [0068.782] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.782] GetProcessHeap () returned 0x3150000 [0068.782] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0068.782] GetProcessHeap () returned 0x3150000 [0068.782] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0068.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0068.785] GetProcessHeap () returned 0x3150000 [0068.785] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.785] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadea87cd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa16112ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0068.786] GetProcessHeap () returned 0x3150000 [0068.786] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.786] GetProcessHeap () returned 0x3150000 [0068.786] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd2853a0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0068.787] GetProcessHeap () returned 0x3150000 [0068.787] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.787] GetProcessHeap () returned 0x3150000 [0068.787] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0068.787] GetProcessHeap () returned 0x3150000 [0068.787] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0068.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa17daefc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0068.958] GetProcessHeap () returned 0x3150000 [0068.959] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1801155, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeaa4f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0068.959] GetProcessHeap () returned 0x3150000 [0068.959] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.959] GetProcessHeap () returned 0x3150000 [0068.959] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeab676, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f98f1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0068.960] GetProcessHeap () returned 0x3150000 [0068.960] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa18273b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeac2bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa18273b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0068.961] GetProcessHeap () returned 0x3150000 [0068.961] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.961] GetProcessHeap () returned 0x3150000 [0068.961] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Images\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadeacbdb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa184d60c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0068.962] GetProcessHeap () returned 0x3150000 [0068.962] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Images\\Stickers\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa184d60c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadff5e06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa1e1d1ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0068.966] GetProcessHeap () returned 0x3150000 [0068.966] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0068.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Images\\Stickers\\Thumbnails\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1e1d1ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae053910, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2937ee9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0068.970] GetProcessHeap () returned 0x3150000 [0068.970] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0068.970] GetProcessHeap () returned 0x3150000 [0068.970] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.970] GetProcessHeap () returned 0x3150000 [0068.970] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.971] GetProcessHeap () returned 0x3150000 [0068.971] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae054a1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2eff0ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0068.973] GetProcessHeap () returned 0x3150000 [0068.973] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\BadgeLogo\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29843a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae12b3bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa29d0853, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0068.976] GetProcessHeap () returned 0x3150000 [0068.976] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.976] GetProcessHeap () returned 0x3150000 [0068.976] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\SplashScreen\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa29d0853, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae1f1d1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2b01b2f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0068.978] GetProcessHeap () returned 0x3150000 [0068.978] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.978] GetProcessHeap () returned 0x3150000 [0068.978] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Square150x150\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2b01b2f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae1f47d0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2caac59, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.980] GetProcessHeap () returned 0x3150000 [0068.980] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.980] GetProcessHeap () returned 0x3150000 [0068.980] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Square310x310\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2cafa91, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae2671bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2cfbf72, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0068.982] GetProcessHeap () returned 0x3150000 [0068.982] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.983] GetProcessHeap () returned 0x3150000 [0068.983] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Square44x44\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2d221c7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae268742, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2e586d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0068.985] GetProcessHeap () returned 0x3150000 [0068.985] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.985] GetProcessHeap () returned 0x3150000 [0068.985] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Square71x71\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2e586d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae26a4c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2e7e910, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0068.987] GetProcessHeap () returned 0x3150000 [0068.987] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.988] GetProcessHeap () returned 0x3150000 [0068.988] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\StoreLogo\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2eb2c15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae2b9598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2ed8e94, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0068.990] GetProcessHeap () returned 0x3150000 [0068.990] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.990] GetProcessHeap () returned 0x3150000 [0068.990] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Logos\\Wide310x150\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2eff0ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae32081c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f4b5a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0068.992] GetProcessHeap () returned 0x3150000 [0068.992] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.992] GetProcessHeap () returned 0x3150000 [0068.992] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.993] GetProcessHeap () returned 0x3150000 [0068.993] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\PDP\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f72ca1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae32171a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f72ca1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.994] GetProcessHeap () returned 0x3150000 [0068.994] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.994] GetProcessHeap () returned 0x3150000 [0068.994] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Videos\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f98f1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae321d67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2f98f1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0068.994] GetProcessHeap () returned 0x3150000 [0068.994] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.994] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Assets\\Videos\\Help\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2f98f1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae3225d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa2fe53db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0068.994] GetProcessHeap () returned 0x3150000 [0068.994] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0068.995] GetProcessHeap () returned 0x3150000 [0068.995] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0068.995] GetProcessHeap () returned 0x3150000 [0068.995] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.995] GetProcessHeap () returned 0x3150000 [0068.995] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\Content\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30ca1fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae322e08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa30ca1fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.996] GetProcessHeap () returned 0x3150000 [0068.996] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0068.996] GetProcessHeap () returned 0x3150000 [0068.996] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0068.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\CoreEngine\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30f045a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae32349e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa30f045a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0068.996] GetProcessHeap () returned 0x3150000 [0068.996] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0068.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\CoreEngine\\Data\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30f045a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae323c6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa31af01d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0068.997] GetProcessHeap () returned 0x3150000 [0068.997] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0068.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\CoreEngine\\Data\\3DBrush\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa30f045a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae3c2040, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa313c90c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0069.253] GetProcessHeap () returned 0x3150000 [0069.253] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0069.253] GetProcessHeap () returned 0x3150000 [0069.253] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0069.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\CoreEngine\\Data\\BrushProfile\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3162b66, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae3c32ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa3162b66, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0069.254] GetProcessHeap () returned 0x3150000 [0069.254] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0069.254] GetProcessHeap () returned 0x3150000 [0069.254] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.254] GetProcessHeap () returned 0x3150000 [0069.254] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.254] GetProcessHeap () returned 0x3150000 [0069.254] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd2853a0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0069.256] GetProcessHeap () returned 0x3150000 [0069.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.256] GetProcessHeap () returned 0x3150000 [0069.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\SurfaceProfiles\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa442943f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae416fc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa4580975, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0069.258] GetProcessHeap () returned 0x3150000 [0069.258] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.258] GetProcessHeap () returned 0x3150000 [0069.258] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.259] GetProcessHeap () returned 0x3150000 [0069.259] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb21852be, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae4c23b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69869570, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0069.261] GetProcessHeap () returned 0x3150000 [0069.261] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb21ab500, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae4c3e79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb21ab500, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.262] GetProcessHeap () returned 0x3150000 [0069.262] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.262] GetProcessHeap () returned 0x3150000 [0069.262] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x69869570, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd88c5fc4, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd88c5fc4, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.262] GetProcessHeap () returned 0x3150000 [0069.262] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd88c5fc4, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd88c5fc4, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd88c5fc4, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0069.264] GetProcessHeap () returned 0x3150000 [0069.264] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.264] GetProcessHeap () returned 0x3150000 [0069.264] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.265] GetProcessHeap () returned 0x3150000 [0069.265] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.265] GetProcessHeap () returned 0x3150000 [0069.265] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb23e79d9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae58079f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69b6448c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0069.266] GetProcessHeap () returned 0x3150000 [0069.266] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb240dc54, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae5814c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb240dc54, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0069.266] GetProcessHeap () returned 0x3150000 [0069.266] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.266] GetProcessHeap () returned 0x3150000 [0069.266] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x69b6448c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd9da2999, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd9da2999, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.267] GetProcessHeap () returned 0x3150000 [0069.267] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9da2999, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd9da2999, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd9da2999, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0069.268] GetProcessHeap () returned 0x3150000 [0069.268] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.268] GetProcessHeap () returned 0x3150000 [0069.268] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.268] GetProcessHeap () returned 0x3150000 [0069.268] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.268] GetProcessHeap () returned 0x3150000 [0069.268] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.268] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f97eba2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae61172a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c39f778, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0069.270] GetProcessHeap () returned 0x3150000 [0069.270] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f97eba2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae6123e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4f97eba2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.270] GetProcessHeap () returned 0x3150000 [0069.270] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.270] GetProcessHeap () returned 0x3150000 [0069.270] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5c39f778, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xdae53146, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdae53146, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0069.271] GetProcessHeap () returned 0x3150000 [0069.271] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.271] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdae53146, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x12ce6df5, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x12ce6df5, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0069.271] GetProcessHeap () returned 0x3150000 [0069.271] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.275] GetProcessHeap () returned 0x3150000 [0069.275] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.275] GetProcessHeap () returned 0x3150000 [0069.275] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.275] GetProcessHeap () returned 0x3150000 [0069.276] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fbe1144, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae652687, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5be1c081, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0069.277] GetProcessHeap () returned 0x3150000 [0069.277] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fbe1144, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae653223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4fbe1144, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.277] GetProcessHeap () returned 0x3150000 [0069.277] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.277] GetProcessHeap () returned 0x3150000 [0069.277] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.277] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5be1c081, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xdb90dade, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdb90dade, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0069.278] GetProcessHeap () returned 0x3150000 [0069.278] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdb90dade, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd257af62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd257af62, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0069.278] GetProcessHeap () returned 0x3150000 [0069.278] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.278] GetProcessHeap () returned 0x3150000 [0069.278] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.278] GetProcessHeap () returned 0x3150000 [0069.278] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.278] GetProcessHeap () returned 0x3150000 [0069.278] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x569db5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb046ec20, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb046ec20, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0069.280] GetProcessHeap () returned 0x3150000 [0069.280] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b6267, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae6c9f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6267, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0069.280] GetProcessHeap () returned 0x3150000 [0069.280] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.280] GetProcessHeap () returned 0x3150000 [0069.280] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb046ec20, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb046ec20, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdb9fcec, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0069.281] GetProcessHeap () returned 0x3150000 [0069.281] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdb79a84, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdb79a84, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdb9fcec, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.281] GetProcessHeap () returned 0x3150000 [0069.281] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.281] GetProcessHeap () returned 0x3150000 [0069.281] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.281] GetProcessHeap () returned 0x3150000 [0069.281] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.281] GetProcessHeap () returned 0x3150000 [0069.281] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf855c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf7c444d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaf7c444d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0069.283] GetProcessHeap () returned 0x3150000 [0069.283] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc44a0e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae726a29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc44a0e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0069.284] GetProcessHeap () returned 0x3150000 [0069.284] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.284] GetProcessHeap () returned 0x3150000 [0069.284] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xaf7c444d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xaf7c444d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd96398a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.284] GetProcessHeap () returned 0x3150000 [0069.284] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.284] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd96398a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd96398a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd96398a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0069.285] GetProcessHeap () returned 0x3150000 [0069.285] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.285] GetProcessHeap () returned 0x3150000 [0069.285] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.285] GetProcessHeap () returned 0x3150000 [0069.285] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.285] GetProcessHeap () returned 0x3150000 [0069.285] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x115e8dfa, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae7e244c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x12f3e2a7, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0069.287] GetProcessHeap () returned 0x3150000 [0069.287] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11909f6c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae7e4415, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x11909f6c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0069.287] GetProcessHeap () returned 0x3150000 [0069.287] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.288] GetProcessHeap () returned 0x3150000 [0069.288] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x12f3e2a7, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xdbfe8744, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdbfe8744, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0069.288] GetProcessHeap () returned 0x3150000 [0069.288] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdbfe8744, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa8c8ab51, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa8c8ab51, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0069.289] GetProcessHeap () returned 0x3150000 [0069.289] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.289] GetProcessHeap () returned 0x3150000 [0069.289] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.289] GetProcessHeap () returned 0x3150000 [0069.289] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.289] GetProcessHeap () returned 0x3150000 [0069.289] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13f7c62e, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae87e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x164e3d2d, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0069.291] GetProcessHeap () returned 0x3150000 [0069.291] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14120099, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae88003f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x14120099, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0069.291] GetProcessHeap () returned 0x3150000 [0069.291] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.291] GetProcessHeap () returned 0x3150000 [0069.291] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x164e3d2d, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xdc925941, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdc925941, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0069.292] GetProcessHeap () returned 0x3150000 [0069.292] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdc925941, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa8e2e542, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa8e2e542, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.292] GetProcessHeap () returned 0x3150000 [0069.293] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.293] GetProcessHeap () returned 0x3150000 [0069.293] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.293] GetProcessHeap () returned 0x3150000 [0069.293] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.293] GetProcessHeap () returned 0x3150000 [0069.293] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26701cd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae8ff986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69da07d7, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.294] GetProcessHeap () returned 0x3150000 [0069.294] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2696342, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae900a2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb2696342, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0069.294] GetProcessHeap () returned 0x3150000 [0069.294] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.294] GetProcessHeap () returned 0x3150000 [0069.295] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x69da07d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xdd0e53b5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdd0e53b5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0069.295] GetProcessHeap () returned 0x3150000 [0069.295] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdd0e53b5, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdd0e53b5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdd0e53b5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0069.295] GetProcessHeap () returned 0x3150000 [0069.295] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.296] GetProcessHeap () returned 0x3150000 [0069.296] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.296] GetProcessHeap () returned 0x3150000 [0069.296] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.296] GetProcessHeap () returned 0x3150000 [0069.296] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26e2784, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae9b674b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69fb68e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0069.394] GetProcessHeap () returned 0x3150000 [0069.394] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.394] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2708a61, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae9b8a01, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb2708a61, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0069.395] GetProcessHeap () returned 0x3150000 [0069.395] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.395] GetProcessHeap () returned 0x3150000 [0069.395] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x69fb68e3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xddc386b4, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xddc386b4, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0069.395] GetProcessHeap () returned 0x3150000 [0069.395] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xddc386b4, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xddc386b4, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xddc386b4, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0069.396] GetProcessHeap () returned 0x3150000 [0069.396] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.396] GetProcessHeap () returned 0x3150000 [0069.396] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.396] GetProcessHeap () returned 0x3150000 [0069.396] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.396] GetProcessHeap () returned 0x3150000 [0069.396] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff4e801, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaea38daa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c77f49b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0069.397] GetProcessHeap () returned 0x3150000 [0069.397] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.397] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff74b34, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaea3adf2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4ff74b34, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0069.397] GetProcessHeap () returned 0x3150000 [0069.398] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.398] GetProcessHeap () returned 0x3150000 [0069.398] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5c77f49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xde4445ea, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xde4445ea, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0069.398] GetProcessHeap () returned 0x3150000 [0069.398] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xde4445ea, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd28c236f, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd28c236f, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0069.398] GetProcessHeap () returned 0x3150000 [0069.398] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.398] GetProcessHeap () returned 0x3150000 [0069.398] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.398] GetProcessHeap () returned 0x3150000 [0069.398] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.398] GetProcessHeap () returned 0x3150000 [0069.398] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ffc0fdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaeaf585c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c58f618, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0069.400] GetProcessHeap () returned 0x3150000 [0069.400] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.400] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ffc0fdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaeaf6ce9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4ffc0fdc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0069.400] GetProcessHeap () returned 0x3150000 [0069.400] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.400] GetProcessHeap () returned 0x3150000 [0069.400] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5c58f618, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xdefbdb44, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdefbdb44, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0069.401] GetProcessHeap () returned 0x3150000 [0069.401] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdefbdb44, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd28e85c8, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd28e85c8, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0069.401] GetProcessHeap () returned 0x3150000 [0069.401] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.401] GetProcessHeap () returned 0x3150000 [0069.401] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.401] GetProcessHeap () returned 0x3150000 [0069.401] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.410] GetProcessHeap () returned 0x3150000 [0069.410] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1096e68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae30dca7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xae30dca7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0069.411] GetProcessHeap () returned 0x3150000 [0069.411] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10e331a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaeb8d82b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x10e331a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.412] GetProcessHeap () returned 0x3150000 [0069.412] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.412] GetProcessHeap () returned 0x3150000 [0069.412] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xae30dca7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xae30dca7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd51152b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.412] GetProcessHeap () returned 0x3150000 [0069.412] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd51152b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd51152b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd51152b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0069.413] GetProcessHeap () returned 0x3150000 [0069.413] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.413] GetProcessHeap () returned 0x3150000 [0069.413] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.413] GetProcessHeap () returned 0x3150000 [0069.413] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.413] GetProcessHeap () returned 0x3150000 [0069.413] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11c813b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7e0bf4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad7e0bf4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.415] GetProcessHeap () returned 0x3150000 [0069.415] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1260aaa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaec89e61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1260aaa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0069.415] GetProcessHeap () returned 0x3150000 [0069.415] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.415] GetProcessHeap () returned 0x3150000 [0069.415] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xad7e0bf4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xad7e0bf4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd478c3a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0069.415] GetProcessHeap () returned 0x3150000 [0069.415] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd478c3a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd478c3a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd478c3a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0069.415] GetProcessHeap () returned 0x3150000 [0069.415] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.415] GetProcessHeap () returned 0x3150000 [0069.416] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.416] GetProcessHeap () returned 0x3150000 [0069.416] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.416] GetProcessHeap () returned 0x3150000 [0069.416] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f6d5e4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0dfe61, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad0dfe61, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0069.417] GetProcessHeap () returned 0x3150000 [0069.417] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f93841, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaecdd562, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33f93841, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0069.417] GetProcessHeap () returned 0x3150000 [0069.417] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.417] GetProcessHeap () returned 0x3150000 [0069.417] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xad0dfe61, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xad0dfe61, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd64283b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0069.418] GetProcessHeap () returned 0x3150000 [0069.418] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd61c5d8, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd61c5d8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd6b4f3c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0069.419] GetProcessHeap () returned 0x3150000 [0069.419] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.419] GetProcessHeap () returned 0x3150000 [0069.419] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.419] GetProcessHeap () returned 0x3150000 [0069.419] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.419] GetProcessHeap () returned 0x3150000 [0069.419] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fb9a9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca2b3ac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaca2b3ac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.420] GetProcessHeap () returned 0x3150000 [0069.420] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fdfcf4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaed7d57f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33fdfcf4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0069.421] GetProcessHeap () returned 0x3150000 [0069.421] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.421] GetProcessHeap () returned 0x3150000 [0069.421] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xaca2b3ac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xaca2b3ac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd40665d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0069.421] GetProcessHeap () returned 0x3150000 [0069.421] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd40665d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd40665d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd40665d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0069.422] GetProcessHeap () returned 0x3150000 [0069.422] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.422] GetProcessHeap () returned 0x3150000 [0069.422] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.422] GetProcessHeap () returned 0x3150000 [0069.422] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.422] GetProcessHeap () returned 0x3150000 [0069.422] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404f13, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaee25a0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1c25330e, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0069.423] GetProcessHeap () returned 0x3150000 [0069.423] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b667506, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaee2755c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1b68d6c9, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0069.424] GetProcessHeap () returned 0x3150000 [0069.424] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.424] GetProcessHeap () returned 0x3150000 [0069.424] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1c25330e, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xdf70aeab, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdf70aeab, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0069.424] GetProcessHeap () returned 0x3150000 [0069.425] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdf70aeab, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa8fd1f17, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa8fd1f17, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0069.425] GetProcessHeap () returned 0x3150000 [0069.425] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.425] GetProcessHeap () returned 0x3150000 [0069.425] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.425] GetProcessHeap () returned 0x3150000 [0069.425] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.425] GetProcessHeap () returned 0x3150000 [0069.425] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ac94c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaef00b37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1dc41199, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0069.427] GetProcessHeap () returned 0x3150000 [0069.427] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d3c29bb, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaef031dc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1d3c29bb, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.428] GetProcessHeap () returned 0x3150000 [0069.428] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.428] GetProcessHeap () returned 0x3150000 [0069.428] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.428] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1dc41199, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xdfdbf898, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdfdbf898, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0069.429] GetProcessHeap () returned 0x3150000 [0069.429] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfdbf898, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa904464d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa904464d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0069.429] GetProcessHeap () returned 0x3150000 [0069.430] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.430] GetProcessHeap () returned 0x3150000 [0069.430] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.430] GetProcessHeap () returned 0x3150000 [0069.430] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.430] GetProcessHeap () returned 0x3150000 [0069.430] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.430] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59460ee7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1ed095d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1ed095d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0069.431] GetProcessHeap () returned 0x3150000 [0069.431] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.431] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\animations\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x595b8410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaef96f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x597b1fa2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0069.434] GetProcessHeap () returned 0x3150000 [0069.434] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.434] GetProcessHeap () returned 0x3150000 [0069.434] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594ad391, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaef981fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x594ad391, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0069.434] GetProcessHeap () returned 0x3150000 [0069.434] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.434] GetProcessHeap () returned 0x3150000 [0069.434] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-gb\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b93c35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf014f53, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59c527fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0069.561] GetProcessHeap () returned 0x3150000 [0069.561] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.561] GetProcessHeap () returned 0x3150000 [0069.561] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c527fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf0838ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e1c43f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0069.562] GetProcessHeap () returned 0x3150000 [0069.562] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us\\jscripts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c9ecb4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf084920, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59c9ecb4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0069.563] GetProcessHeap () returned 0x3150000 [0069.563] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.563] GetProcessHeap () returned 0x3150000 [0069.563] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us\\pages\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e1c43f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf085638, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e1c43f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0069.563] GetProcessHeap () returned 0x3150000 [0069.563] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.563] GetProcessHeap () returned 0x3150000 [0069.563] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us\\styles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e1c43f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf0862ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e4269d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0069.564] GetProcessHeap () returned 0x3150000 [0069.564] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.564] GetProcessHeap () returned 0x3150000 [0069.564] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.565] GetProcessHeap () returned 0x3150000 [0069.565] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\font\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e4269d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf086b6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e4269d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0069.565] GetProcessHeap () returned 0x3150000 [0069.565] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.565] GetProcessHeap () returned 0x3150000 [0069.565] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\fonts\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e4269d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf0873c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e4269d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0069.566] GetProcessHeap () returned 0x3150000 [0069.566] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.566] GetProcessHeap () returned 0x3150000 [0069.566] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a00c2e3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf19691b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6b3675, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0069.575] GetProcessHeap () returned 0x3150000 [0069.575] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a8f7f56, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf27329f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5acfe8e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0069.582] GetProcessHeap () returned 0x3150000 [0069.582] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.582] GetProcessHeap () returned 0x3150000 [0069.582] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5acfe8e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf35a206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b07f008, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0069.587] GetProcessHeap () returned 0x3150000 [0069.587] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.591] GetProcessHeap () returned 0x3150000 [0069.591] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.591] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images\\osf\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b665011, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b3b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6b3675, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0069.593] GetProcessHeap () returned 0x3150000 [0069.593] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.593] GetProcessHeap () returned 0x3150000 [0069.593] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.593] GetProcessHeap () returned 0x3150000 [0069.593] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\jscripts\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b6b3675, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b4e8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6d8db2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0069.594] GetProcessHeap () returned 0x3150000 [0069.594] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.594] GetProcessHeap () returned 0x3150000 [0069.594] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\manifests\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b6d8db2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b57d0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6d8db2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0069.595] GetProcessHeap () returned 0x3150000 [0069.595] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.595] GetProcessHeap () returned 0x3150000 [0069.595] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd1ed095d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd1ed095d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1ed095d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.596] GetProcessHeap () returned 0x3150000 [0069.596] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.596] GetProcessHeap () returned 0x3150000 [0069.596] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\pages\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5db81172, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b6b86, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5db81172, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.596] GetProcessHeap () returned 0x3150000 [0069.596] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.596] GetProcessHeap () returned 0x3150000 [0069.596] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.596] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\sr-cyrl-cs\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5dde3722, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b7384, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5dde3722, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0069.597] GetProcessHeap () returned 0x3150000 [0069.597] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.597] GetProcessHeap () returned 0x3150000 [0069.597] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\sr-latn-cs\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5dde3722, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b7fcf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5dde3722, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0069.597] GetProcessHeap () returned 0x3150000 [0069.597] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.597] GetProcessHeap () returned 0x3150000 [0069.597] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\xaml\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5de0997c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b8a1c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5de0997c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0069.597] GetProcessHeap () returned 0x3150000 [0069.597] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\xaml\\onenote\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5de0997c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf435cd5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5dea7b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0069.599] GetProcessHeap () returned 0x3150000 [0069.600] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.600] GetProcessHeap () returned 0x3150000 [0069.600] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.600] GetProcessHeap () returned 0x3150000 [0069.600] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.600] GetProcessHeap () returned 0x3150000 [0069.600] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58fa379e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0069.602] GetProcessHeap () returned 0x3150000 [0069.602] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58fa379e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf4f3df1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x58fa379e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0069.602] GetProcessHeap () returned 0x3150000 [0069.602] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.602] GetProcessHeap () returned 0x3150000 [0069.602] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd1eaa713, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0069.603] GetProcessHeap () returned 0x3150000 [0069.603] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.603] GetProcessHeap () returned 0x3150000 [0069.603] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.603] GetProcessHeap () returned 0x3150000 [0069.603] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf561945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e6321cd, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0069.773] GetProcessHeap () returned 0x3150000 [0069.773] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf5639e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa599a57e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.774] GetProcessHeap () returned 0x3150000 [0069.774] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.774] GetProcessHeap () returned 0x3150000 [0069.774] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59c07d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf5645f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa59c07d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0069.774] GetProcessHeap () returned 0x3150000 [0069.774] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\Assets\\WebPlayer\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59c07d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf5e05e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5da4145, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0069.779] GetProcessHeap () returned 0x3150000 [0069.779] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.779] GetProcessHeap () returned 0x3150000 [0069.779] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.779] GetProcessHeap () returned 0x3150000 [0069.779] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\en-us\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa602cafb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf65cc53, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa611194e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0069.782] GetProcessHeap () returned 0x3150000 [0069.782] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.782] GetProcessHeap () returned 0x3150000 [0069.782] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\fonts\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa611194e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf65eae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa611194e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0069.783] GetProcessHeap () returned 0x3150000 [0069.783] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.783] GetProcessHeap () returned 0x3150000 [0069.783] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.783] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa611194e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf75f944, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6794654, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0069.787] GetProcessHeap () returned 0x3150000 [0069.787] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\images\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa62b52e7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf83e928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6373eb6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0069.790] GetProcessHeap () returned 0x3150000 [0069.790] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.790] GetProcessHeap () returned 0x3150000 [0069.791] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\images\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6373eb6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d0215, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa644c9ea, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0069.793] GetProcessHeap () returned 0x3150000 [0069.793] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.795] GetProcessHeap () returned 0x3150000 [0069.795] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.796] GetProcessHeap () returned 0x3150000 [0069.796] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.796] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e6321cd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaf8d1431, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e6321cd, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0069.797] GetProcessHeap () returned 0x3150000 [0069.797] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.797] GetProcessHeap () returned 0x3150000 [0069.797] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.797] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa786af81, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d1b15, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa786af81, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0069.797] GetProcessHeap () returned 0x3150000 [0069.797] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\view\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa786af81, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d21fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa78911fc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.798] GetProcessHeap () returned 0x3150000 [0069.798] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0069.798] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\view\\landing\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa786af81, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d2741, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa78911fc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0069.798] GetProcessHeap () returned 0x3150000 [0069.798] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0069.799] GetProcessHeap () returned 0x3150000 [0069.799] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0069.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\view\\shared\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa78911fc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d2bfe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa78911fc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0069.799] GetProcessHeap () returned 0x3150000 [0069.799] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0069.799] GetProcessHeap () returned 0x3150000 [0069.799] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0069.799] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml\\view\\story\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa78911fc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf943e43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa78b7317, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.801] GetProcessHeap () returned 0x3150000 [0069.801] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0069.801] GetProcessHeap () returned 0x3150000 [0069.801] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.802] GetProcessHeap () returned 0x3150000 [0069.802] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.802] GetProcessHeap () returned 0x3150000 [0069.802] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\xaml\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7c24a57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf945b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7c24a57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0069.802] GetProcessHeap () returned 0x3150000 [0069.802] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\xaml\\mso\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7c24a57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf9b0041, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7c4acb9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0069.804] GetProcessHeap () returned 0x3150000 [0069.805] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.805] GetProcessHeap () returned 0x3150000 [0069.805] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.805] GetProcessHeap () returned 0x3150000 [0069.805] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.805] GetProcessHeap () returned 0x3150000 [0069.806] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.806] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57d3c26, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xafabb342, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0069.807] GetProcessHeap () returned 0x3150000 [0069.807] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57d3c26, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xafabc4b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa57d3c26, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0069.808] GetProcessHeap () returned 0x3150000 [0069.808] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.808] GetProcessHeap () returned 0x3150000 [0069.808] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.808] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e60bed5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xafabcf70, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0069.808] GetProcessHeap () returned 0x3150000 [0069.808] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.808] GetProcessHeap () returned 0x3150000 [0069.808] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.809] GetProcessHeap () returned 0x3150000 [0069.809] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.809] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ef508f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.811] GetProcessHeap () returned 0x3150000 [0069.811] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2000117, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafabf4fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x21c9d54, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1eb8 [0069.859] GetProcessHeap () returned 0x3150000 [0069.859] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.860] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2000117, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafb54c83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2072835, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0069.878] GetProcessHeap () returned 0x3150000 [0069.878] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.878] GetProcessHeap () returned 0x3150000 [0069.878] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2072835, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbab880, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x210b18c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0069.880] GetProcessHeap () returned 0x3150000 [0069.880] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.880] GetProcessHeap () returned 0x3150000 [0069.880] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.880] GetProcessHeap () returned 0x3150000 [0069.880] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.882] GetProcessHeap () returned 0x3150000 [0069.882] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.882] GetProcessHeap () returned 0x3150000 [0069.882] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.883] GetProcessHeap () returned 0x3150000 [0069.883] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0069.884] GetProcessHeap () returned 0x3150000 [0069.884] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbae931, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4f76a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.885] GetProcessHeap () returned 0x3150000 [0069.885] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.885] GetProcessHeap () returned 0x3150000 [0069.886] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0069.886] GetProcessHeap () returned 0x3150000 [0069.886] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.886] GetProcessHeap () returned 0x3150000 [0069.886] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.887] GetProcessHeap () returned 0x3150000 [0069.887] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.887] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16dc6f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0069.889] GetProcessHeap () returned 0x3150000 [0069.889] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x170294f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbb05d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x170294f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.889] GetProcessHeap () returned 0x3150000 [0069.889] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.889] GetProcessHeap () returned 0x3150000 [0069.889] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x170294f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbf828d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1b3b5a8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0069.891] GetProcessHeap () returned 0x3150000 [0069.891] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x170294f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbfa501, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x18645b9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0069.894] GetProcessHeap () returned 0x3150000 [0069.894] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.894] GetProcessHeap () returned 0x3150000 [0069.894] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18645b9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafc4ec6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x19e1d44, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0069.896] GetProcessHeap () returned 0x3150000 [0069.896] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.896] GetProcessHeap () returned 0x3150000 [0069.896] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.897] GetProcessHeap () returned 0x3150000 [0069.897] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd5bf8796, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd5bf8796, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0069.897] GetProcessHeap () returned 0x3150000 [0069.897] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.897] GetProcessHeap () returned 0x3150000 [0069.897] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.897] GetProcessHeap () returned 0x3150000 [0069.897] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.897] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x255053c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0069.899] GetProcessHeap () returned 0x3150000 [0069.899] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25557698, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafc5120a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2564079d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0069.901] GetProcessHeap () returned 0x3150000 [0069.901] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25557698, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafcf43cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x255a7e0e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0069.903] GetProcessHeap () returned 0x3150000 [0069.903] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.903] GetProcessHeap () returned 0x3150000 [0069.903] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x255a7e0e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafd6c55f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x255f42ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0069.905] GetProcessHeap () returned 0x3150000 [0069.905] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0069.905] GetProcessHeap () returned 0x3150000 [0069.905] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.906] GetProcessHeap () returned 0x3150000 [0069.906] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0069.906] GetProcessHeap () returned 0x3150000 [0069.906] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.907] GetProcessHeap () returned 0x3150000 [0069.907] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0069.907] GetProcessHeap () returned 0x3150000 [0069.907] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0069.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2499f315, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0069.909] GetProcessHeap () returned 0x3150000 [0069.909] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249c5573, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafd6f7c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x249c5573, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0069.910] GetProcessHeap () returned 0x3150000 [0069.910] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0069.910] GetProcessHeap () returned 0x3150000 [0069.910] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0069.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249eb7cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafdc1431, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24bc56a8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0069.912] GetProcessHeap () returned 0x3150000 [0069.912] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0069.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249eb7cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe104e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24a5dedd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0070.119] GetProcessHeap () returned 0x3150000 [0070.119] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.119] GetProcessHeap () returned 0x3150000 [0070.119] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24a5dedd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe13300, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24ad5f3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0070.121] GetProcessHeap () returned 0x3150000 [0070.121] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.121] GetProcessHeap () returned 0x3150000 [0070.121] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24ad5f3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe13de4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24ad5f3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0070.122] GetProcessHeap () returned 0x3150000 [0070.122] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.122] GetProcessHeap () returned 0x3150000 [0070.122] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b52f97, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe1485b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24bc56a8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0070.122] GetProcessHeap () returned 0x3150000 [0070.122] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.123] GetProcessHeap () returned 0x3150000 [0070.123] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.123] GetProcessHeap () returned 0x3150000 [0070.124] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd442d6fc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd442d6fc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0070.125] GetProcessHeap () returned 0x3150000 [0070.125] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.125] GetProcessHeap () returned 0x3150000 [0070.125] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Strings\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25492ca6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe15ed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x25492ca6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0070.125] GetProcessHeap () returned 0x3150000 [0070.125] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Strings\\en-US\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25492ca6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe16ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x25492ca6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0070.126] GetProcessHeap () returned 0x3150000 [0070.126] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.126] GetProcessHeap () returned 0x3150000 [0070.126] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.126] GetProcessHeap () returned 0x3150000 [0070.126] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249c5573, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafd6f1ac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x249c5573, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0070.126] GetProcessHeap () returned 0x3150000 [0070.126] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.126] GetProcessHeap () returned 0x3150000 [0070.126] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0070.129] GetProcessHeap () returned 0x3150000 [0070.129] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x248ba4f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0070.130] GetProcessHeap () returned 0x3150000 [0070.130] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x248ba4f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe6e80a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x248ba4f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0070.131] GetProcessHeap () returned 0x3150000 [0070.131] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.131] GetProcessHeap () returned 0x3150000 [0070.131] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0070.132] GetProcessHeap () returned 0x3150000 [0070.132] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.132] GetProcessHeap () returned 0x3150000 [0070.132] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.132] GetProcessHeap () returned 0x3150000 [0070.132] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x367c081d, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaff5073a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37eb3642, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0070.134] GetProcessHeap () returned 0x3150000 [0070.134] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36b540f8, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb004bc29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36b540f8, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0070.135] GetProcessHeap () returned 0x3150000 [0070.135] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.135] GetProcessHeap () returned 0x3150000 [0070.135] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37eb3642, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xe4deabeb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe4deabeb, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0070.136] GetProcessHeap () returned 0x3150000 [0070.136] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0070.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4deabeb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa90b6d32, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa90b6d32, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0070.137] GetProcessHeap () returned 0x3150000 [0070.137] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0070.137] GetProcessHeap () returned 0x3150000 [0070.137] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.137] GetProcessHeap () returned 0x3150000 [0070.137] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.137] GetProcessHeap () returned 0x3150000 [0070.137] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.137] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3979638c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00f9315, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a630d34, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0070.139] GetProcessHeap () returned 0x3150000 [0070.139] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39a1ec32, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00fa945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39a1ec32, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0070.139] GetProcessHeap () returned 0x3150000 [0070.139] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.139] GetProcessHeap () returned 0x3150000 [0070.139] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3a630d34, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xe56b56ac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe56b56ac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0070.140] GetProcessHeap () returned 0x3150000 [0070.140] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0070.140] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe56b56ac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa91031f7, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa91031f7, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0070.147] GetProcessHeap () returned 0x3150000 [0070.147] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0070.147] GetProcessHeap () returned 0x3150000 [0070.147] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.148] GetProcessHeap () returned 0x3150000 [0070.148] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.148] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c", cAlternateFileName="MI66C7~1.SCA")) returned 1 [0070.153] GetProcessHeap () returned 0x3150000 [0070.153] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.153] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0070.155] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.155] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc08d79c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc08d79c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc08d79c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1036, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0070.155] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbff4e2d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xbff4e2d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0070.155] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc08d79c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0b39f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x295b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0070.155] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0070.155] GetProcessHeap () returned 0x3150000 [0070.155] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.155] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0070.155] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.156] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0070.156] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0070.156] GetProcessHeap () returned 0x3150000 [0070.156] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.156] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0b39f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0070.156] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb020b681, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeApp", cAlternateFileName="")) returned 1 [0070.156] GetProcessHeap () returned 0x3150000 [0070.156] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.156] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb020b681, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0070.157] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb020b681, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.157] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ab869, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0070.157] GetProcessHeap () returned 0x3150000 [0070.157] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0070.157] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ab869, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0070.159] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ab869, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.159] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0b39f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_12x12.scale-100.png", cAlternateFileName="")) returned 1 [0070.159] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_12x12.scale-100.png", cAlternateFileName="")) returned 1 [0070.159] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b12, dwReserved0=0x0, dwReserved1=0x0, cFileName="friends.scale-100.png", cAlternateFileName="")) returned 1 [0070.159] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="highfive.scale-100.png", cAlternateFileName="")) returned 1 [0070.159] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ac9ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0070.159] GetProcessHeap () returned 0x3150000 [0070.159] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0070.159] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ac9ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0070.160] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ac9ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.160] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12d, dwReserved0=0x0, dwReserved1=0x0, cFileName="image_placeholder.scale-100.png", cAlternateFileName="")) returned 1 [0070.160] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12d, dwReserved0=0x0, dwReserved1=0x0, cFileName="image_placeholder.scale-100.png", cAlternateFileName="")) returned 0 [0070.160] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0070.160] GetProcessHeap () returned 0x3150000 [0070.160] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0070.160] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LockScreenBadgeLogo.scale-100.png", cAlternateFileName="")) returned 1 [0070.160] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-100.png", cAlternateFileName="")) returned 1 [0070.160] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0070.160] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0070.160] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-100.png", cAlternateFileName="")) returned 1 [0070.161] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0070.161] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0070.161] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLogo.scale-100.png", cAlternateFileName="")) returned 1 [0070.161] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-100.png", cAlternateFileName="")) returned 1 [0070.161] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc12610a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc12610a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0070.161] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc12610a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc12610a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc12610a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x43b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0070.161] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14c364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc14c364, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc14c364, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeTile.scale-100.png", cAlternateFileName="")) returned 1 [0070.161] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14c364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc14c364, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc14c364, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0070.161] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14c364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc14c364, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc14c364, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0070.161] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14c364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc14c364, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc14c364, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeWideTile.scale-100.png", cAlternateFileName="")) returned 1 [0070.161] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc14c364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc14c364, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc14c364, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeWideTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0070.161] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1725bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc1725bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeWideTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0070.162] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype_titlebar_logo.scale-100.png", cAlternateFileName="")) returned 1 [0070.162] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1725bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc1725bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-100.png", cAlternateFileName="")) returned 1 [0070.162] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1725bd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc1725bd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-100.png", cAlternateFileName="")) returned 0 [0070.162] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0070.162] GetProcessHeap () returned 0x3150000 [0070.162] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0070.163] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ab869, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 0 [0070.163] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0070.163] GetProcessHeap () returned 0x3150000 [0070.163] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.163] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb020b681, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeApp", cAlternateFileName="")) returned 0 [0070.163] FindClose (in: hFindFile=0x57d20b8 | out: hFindFile=0x57d20b8) returned 1 [0070.163] GetProcessHeap () returned 0x3150000 [0070.163] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.164] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c", cAlternateFileName="MI29A2~1.0_N")) returned 1 [0070.164] GetProcessHeap () returned 0x3150000 [0070.164] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0070.320] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.320] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739db1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x739db1f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x739db1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0070.320] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0335567, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0070.320] GetProcessHeap () returned 0x3150000 [0070.320] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0335567, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0070.321] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0335567, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.321] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x73778cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1 [0070.321] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x73778cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0 [0070.322] FindClose (in: hFindFile=0x57d1e38 | out: hFindFile=0x57d1e38) returned 1 [0070.322] GetProcessHeap () returned 0x3150000 [0070.322] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.322] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739db1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x73c3d79, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x73c3d79, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x295b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0070.322] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0070.322] GetProcessHeap () returned 0x3150000 [0070.322] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0070.322] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.322] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0070.322] FindClose (in: hFindFile=0x57d20b8 | out: hFindFile=0x57d20b8) returned 1 [0070.322] GetProcessHeap () returned 0x3150000 [0070.322] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.322] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0070.322] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0070.322] GetProcessHeap () returned 0x3150000 [0070.322] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.323] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c", cAlternateFileName="MIC69C~1.0_X")) returned 1 [0070.323] GetProcessHeap () returned 0x3150000 [0070.323] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0070.325] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.325] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7436489, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7436489, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7436489, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31187, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0070.325] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7410239, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7410239, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0070.325] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fc1b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0070.325] GetProcessHeap () returned 0x3150000 [0070.325] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fc1b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0070.326] FindNextFileW (in: hFindFile=0x57d1cb8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fc1b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.326] FindNextFileW (in: hFindFile=0x57d1cb8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482940, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7482940, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1 [0070.326] FindNextFileW (in: hFindFile=0x57d1cb8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482940, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7482940, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0 [0070.326] FindClose (in: hFindFile=0x57d1cb8 | out: hFindFile=0x57d1cb8) returned 1 [0070.326] GetProcessHeap () returned 0x3150000 [0070.326] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.326] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x745c6e7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2982, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0070.326] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74a8b9e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74cedf7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x74cedf7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1 [0070.326] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cedf7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74f5051, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x74f5051, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Skype.ImageTool.dll", cAlternateFileName="")) returned 1 [0070.326] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f5051, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x751b2af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x751b2af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Skype.ImageTool.winmd", cAlternateFileName="")) returned 1 [0070.327] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x888bff4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x888bff4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0070.327] GetProcessHeap () returned 0x3150000 [0070.327] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x888bff4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x888bff4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0070.327] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x888bff4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x888bff4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.327] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc57111f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdc57111f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc57111f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x2caf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.857e5af3.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1 [0070.327] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc57111f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdc57111f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc57111f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x2caf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", cAlternateFileName="")) returned 1 [0070.327] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc57111f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdc57111f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc57111f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x2caf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", cAlternateFileName="")) returned 0 [0070.327] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0070.327] GetProcessHeap () returned 0x3150000 [0070.327] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.327] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751b2af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7541508, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7541508, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationsExtensions.winmd", cAlternateFileName="")) returned 1 [0070.327] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7541508, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x758d9bf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x758d9bf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf5430, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0070.327] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758d9bf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7698a3e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7698a3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x236c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="roottools.dll", cAlternateFileName="")) returned 1 [0070.327] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7698a3e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77eff6f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77eff6f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x325c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtmcodecs.dll", cAlternateFileName="")) returned 1 [0070.327] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77eff6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x783c427, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x783c427, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe0c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="RtmMediaManager.dll", cAlternateFileName="")) returned 1 [0070.328] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7862680, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x78aeb37, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x78aeb37, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x77690, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtmpal.dll", cAlternateFileName="")) returned 1 [0070.328] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78aeb37, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7d00f8c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7d00f8c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8fb488, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtmpltfm.dll", cAlternateFileName="")) returned 1 [0070.328] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fd343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeApp", cAlternateFileName="")) returned 1 [0070.328] GetProcessHeap () returned 0x3150000 [0070.328] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fd343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0070.328] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fd343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.328] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb045bfbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0070.328] GetProcessHeap () returned 0x3150000 [0070.328] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0070.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb045bfbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0070.330] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb045bfbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.331] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb04fda55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Audio", cAlternateFileName="")) returned 1 [0070.331] GetProcessHeap () returned 0x3150000 [0070.331] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0070.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb04fda55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0070.332] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb04fda55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.332] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8048362, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x806e5bb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x806e5bb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x714d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IncomingCall.wma", cAlternateFileName="")) returned 1 [0070.332] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7ffbeaa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7ffbeaa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="incoming_contacts.wav", cAlternateFileName="")) returned 1 [0070.332] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffbeaa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8022104, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8022104, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfde4, dwReserved0=0x0, dwReserved1=0x0, cFileName="incoming_file.wav", cAlternateFileName="")) returned 1 [0070.333] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8022104, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8048362, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8048362, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="incoming_im.wav", cAlternateFileName="")) returned 1 [0070.333] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8048362, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8048362, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8048362, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="incoming_voicemail.wav", cAlternateFileName="")) returned 1 [0070.333] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x806e5bb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8094814, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8094814, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2dc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Answer.m4a", cAlternateFileName="")) returned 1 [0070.333] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80baa72, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x80e0ccb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x80e0ccb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Calling.m4a", cAlternateFileName="")) returned 1 [0070.333] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e0ccb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x80e0ccb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x80e0ccb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa099, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Connecting.m4a", cAlternateFileName="")) returned 1 [0070.333] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e0ccb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x81533dc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x81533dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x34ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Dialing.m4a", cAlternateFileName="")) returned 1 [0070.333] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81533dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x819f893, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x819f893, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2847, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Ended.m4a", cAlternateFileName="")) returned 1 [0070.333] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x819f893, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x81c5af1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x81c5af1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Failed.m4a", cAlternateFileName="")) returned 1 [0070.333] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c5af1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x81ebd4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3699, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Hold.m4a", cAlternateFileName="")) returned 1 [0070.333] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ebd4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8211fa4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8211fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x199e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Resume.m4a", cAlternateFileName="")) returned 1 [0070.333] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ebd4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8211fa4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8211fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x199e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Resume.m4a", cAlternateFileName="")) returned 0 [0070.333] FindClose (in: hFindFile=0x57d1c78 | out: hFindFile=0x57d1c78) returned 1 [0070.334] GetProcessHeap () returned 0x3150000 [0070.334] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0070.334] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8211fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8211fa4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8211fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_12x12.scale-200.png", cAlternateFileName="")) returned 1 [0070.334] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8211fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8211fa4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8211fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_12x12.scale-200.png", cAlternateFileName="")) returned 1 [0070.334] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8211fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x825e45b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x825e45b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a02, dwReserved0=0x0, dwReserved1=0x0, cFileName="friends.scale-200.png", cAlternateFileName="")) returned 1 [0070.334] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x825e45b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x825e45b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f19, dwReserved0=0x0, dwReserved1=0x0, cFileName="highfive.scale-200.png", cAlternateFileName="")) returned 1 [0070.334] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05006d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0070.334] GetProcessHeap () returned 0x3150000 [0070.334] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0070.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05006d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0070.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05006d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x825e45b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x825e45b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x781, dwReserved0=0x0, dwReserved1=0x0, cFileName="avatar_default_large.png", cAlternateFileName="")) returned 1 [0070.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825e45b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x82846b4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x82846b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x72a, dwReserved0=0x0, dwReserved1=0x0, cFileName="avatar_group_large.png", cAlternateFileName="")) returned 1 [0070.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82846b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x82d0b6b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x82d0b6b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x399, dwReserved0=0x0, dwReserved1=0x0, cFileName="chat_spinner.png", cAlternateFileName="")) returned 1 [0070.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d0b6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x82d0b6b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x82d0b6b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="computer_black.png", cAlternateFileName="")) returned 1 [0070.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d0b6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x82d0b6b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x82d0b6b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="computer_white.png", cAlternateFileName="")) returned 1 [0070.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d0b6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x831d022, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x831d022, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x91f, dwReserved0=0x0, dwReserved1=0x0, cFileName="expression_picker_tab_mruicon.png", cAlternateFileName="")) returned 1 [0070.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x831d022, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x831d022, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb44, dwReserved0=0x0, dwReserved1=0x0, cFileName="expression_picker_tab_placeholder.png", cAlternateFileName="")) returned 1 [0070.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x831d022, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x831d022, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback_icon_smiley.png", cAlternateFileName="")) returned 1 [0070.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x834327c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x834327c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic_placeholder.png", cAlternateFileName="")) returned 1 [0070.336] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834327c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x834327c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x834327c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="handset_black.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834327c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x834327c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x834327c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x251, dwReserved0=0x0, dwReserved1=0x0, cFileName="handset_white.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834327c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x834327c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x834327c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0x0, cFileName="image_placeholder.scale-200.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834327c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x834327c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x834327c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x691, dwReserved0=0x0, dwReserved1=0x0, cFileName="IncomingCallBrandingImage.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834327c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83694da, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83694da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x83f, dwReserved0=0x0, dwReserved1=0x0, cFileName="moji_mask.contrast-black.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83694da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83694da, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83694da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x842, dwReserved0=0x0, dwReserved1=0x0, cFileName="moji_mask.contrast-standard.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83694da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83694da, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83694da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x842, dwReserved0=0x0, dwReserved1=0x0, cFileName="moji_mask.contrast-white.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83694da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x838f733, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x838f733, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x856, dwReserved0=0x0, dwReserved1=0x0, cFileName="moji_mask_DarkMain.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838f733, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x838f733, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x838f733, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x658, dwReserved0=0x0, dwReserved1=0x0, cFileName="PiSh_placeholder.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838f733, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x838f733, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x838f733, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="PiSh_placeholder_small.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838f733, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x838f733, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x838f733, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="signal_black.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838f733, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x838f733, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x838f733, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x0, dwReserved1=0x0, cFileName="signal_white.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b598c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83b598c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_logo_black.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b598c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83b598c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_logo_white.png", cAlternateFileName="")) returned 1 [0070.337] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b598c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83b598c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_logo_white.png", cAlternateFileName="")) returned 0 [0070.338] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0070.338] GetProcessHeap () returned 0x3150000 [0070.338] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0070.338] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b598c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83b598c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83b598c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="LockScreenBadgeLogo.scale-200.png", cAlternateFileName="")) returned 1 [0070.338] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b598c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x83dbbea, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x83dbbea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="quickreplysend.png", cAlternateFileName="")) returned 1 [0070.338] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8401e43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8401e43, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8401e43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-200.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8401e43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8401e43, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8401e43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-200_contrast-black.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84280a1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x844e2fb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x844e2fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-200_contrast-white.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844e2fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x844e2fb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x844e2fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-16_altform-unplated.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844e2fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x844e2fb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x844e2fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-16_contrast-black.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844e2fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x844e2fb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x844e2fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-16_contrast-white.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844e2fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x844e2fb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x844e2fb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-24_altform-unplated.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844e2fb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8474559, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8474559, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-24_contrast-black.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a7b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x849a7b2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x849a7b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-24_contrast-white.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a7b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x849a7b2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x849a7b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xdd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-256_altform-unplated.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x849a7b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84c0a0b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84c0a0b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xded, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-256_contrast-black.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84c0a0b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84e6c69, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84e6c69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-256_contrast-white.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e6c69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84e6c69, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84e6c69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-32_altform-unplated.png", cAlternateFileName="")) returned 1 [0070.339] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e6c69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84e6c69, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84e6c69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-32_contrast-black.png", cAlternateFileName="")) returned 1 [0070.340] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e6c69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84e6c69, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84e6c69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-32_contrast-white.png", cAlternateFileName="")) returned 1 [0070.340] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84e6c69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x850cec2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x850cec2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-48_altform-unplated.png", cAlternateFileName="")) returned 1 [0070.340] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x850cec2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x850cec2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x850cec2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-48_contrast-black.png", cAlternateFileName="")) returned 1 [0070.340] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x850cec2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8533120, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8533120, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.targetsize-48_contrast-white.png", cAlternateFileName="")) returned 1 [0070.340] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8533120, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8559379, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8559379, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3c728, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAssets-Light.ttf", cAlternateFileName="")) returned 1 [0070.340] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8559379, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x857f5d3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x857f5d3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAssets-Regular.ttf", cAlternateFileName="")) returned 1 [0070.340] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x857f5d3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x85a5831, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x85a5831, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-200.png", cAlternateFileName="")) returned 1 [0070.340] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85a5831, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x85f1ce8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x85f1ce8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-200_contrast-black.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85f1ce8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8617f41, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8617f41, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8617f41, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x863e19a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x863e19a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLogo.scale-200.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863e19a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x868a65b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x868a65b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x845, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-200.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868a65b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x868a65b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x868a65b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x887, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-200_contrast-black.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868a65b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86b08ab, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86b08ab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b08ab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86d6b09, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86d6b09, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x655, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeTile.scale-200.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d6b09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8722fc0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8722fc0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeTile.scale-200_contrast-black.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8722fc0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8722fc0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8722fc0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x59e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8722fc0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8749219, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8749219, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeWideTile.scale-200.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f473, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x876f473, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x876f473, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeWideTile.scale-200_contrast-black.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876f473, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x882e03f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x882e03f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeWideTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83dbbea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8401e43, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8401e43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype_titlebar_logo.scale-200.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x882e03f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x882e03f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x882e03f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1309, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-200.png", cAlternateFileName="")) returned 1 [0070.341] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0501269, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text", cAlternateFileName="")) returned 1 [0070.342] GetProcessHeap () returned 0x3150000 [0070.342] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0070.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Text\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0501269, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0070.342] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0501269, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.342] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x887a4f1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LegalDisclaimer.txt", cAlternateFileName="")) returned 1 [0070.342] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x887a4f1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LegalDisclaimer.txt", cAlternateFileName="")) returned 0 [0070.342] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0070.342] GetProcessHeap () returned 0x3150000 [0070.342] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0070.342] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8854298, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0501269, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Text", cAlternateFileName="")) returned 0 [0070.342] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0070.342] GetProcessHeap () returned 0x3150000 [0070.342] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0070.343] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05022d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab6490e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Designs", cAlternateFileName="")) returned 1 [0070.343] GetProcessHeap () returned 0x3150000 [0070.343] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0070.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05022d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab6490e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0070.344] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05022d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab6490e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.344] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05031a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Emoticons", cAlternateFileName="EMOTIC~1")) returned 1 [0070.344] GetProcessHeap () returned 0x3150000 [0070.344] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0070.344] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Emoticons\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05031a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0070.344] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05031a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.344] FindNextFileW (in: hFindFile=0x57d1cf8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05f6ee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="large", cAlternateFileName="")) returned 1 [0070.345] GetProcessHeap () returned 0x3150000 [0070.345] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0070.345] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Emoticons\\large\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05f6ee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0070.350] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb05f6ee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9229e15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.350] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x887a4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x88a074f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x88a074f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="angel.png", cAlternateFileName="")) returned 1 [0070.350] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c69a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x88c69a9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x88c69a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="angry.png", cAlternateFileName="")) returned 1 [0070.350] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c69a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8912e60, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8912e60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="bandit.png", cAlternateFileName="")) returned 1 [0070.350] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8912e60, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x89390b9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x89390b9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1181, dwReserved0=0x0, dwReserved1=0x0, cFileName="bartlett.png", cAlternateFileName="")) returned 1 [0070.350] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895f317, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x895f317, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x895f317, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="beer.png", cAlternateFileName="")) returned 1 [0070.350] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8985570, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8985570, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8985570, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="bigsmile.png", cAlternateFileName="")) returned 1 [0070.350] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8985570, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8985570, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8985570, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="bike.png", cAlternateFileName="")) returned 1 [0070.350] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8985570, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8985570, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8985570, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1290, dwReserved0=0x0, dwReserved1=0x0, cFileName="blushing.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8985570, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8985570, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8985570, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbda, dwReserved0=0x0, dwReserved1=0x0, cFileName="bow.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ab7ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x89ab7ca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x89ab7ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1755, dwReserved0=0x0, dwReserved1=0x0, cFileName="brokenheart.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ab7ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x89ab7ca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x89ab7ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="bug.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ab7ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x89ab7ca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x89ab7ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1633, dwReserved0=0x0, dwReserved1=0x0, cFileName="cake.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ab7ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x89d1a28, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x89d1a28, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x150e, dwReserved0=0x0, dwReserved1=0x0, cFileName="call.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d1a28, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x89f7c81, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x89f7c81, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cash.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89f7c81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8a44138, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8a44138, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc27, dwReserved0=0x0, dwReserved1=0x0, cFileName="cat.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a44138, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8a6a391, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8a6a391, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="clapping.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a6a391, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8a905ef, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8a905ef, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="coffee.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a905ef, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ab684d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ab684d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="cool.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab684d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ab684d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ab684d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1316, dwReserved0=0x0, dwReserved1=0x0, cFileName="crying.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8adcaa6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b02d00, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b02d00, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x118c, dwReserved0=0x0, dwReserved1=0x0, cFileName="dancing.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b02d00, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b28f5e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b28f5e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1182, dwReserved0=0x0, dwReserved1=0x0, cFileName="devil.png", cAlternateFileName="")) returned 1 [0070.351] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b28f5e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b4f1b7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b4f1b7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1649, dwReserved0=0x0, dwReserved1=0x0, cFileName="dog.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b4f1b7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b75410, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b75410, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="doh.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b75410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b75410, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b75410, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drink.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b75410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b9b66e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b9b66e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1595, dwReserved0=0x0, dwReserved1=0x0, cFileName="drunk.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b9b66e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b9b66e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b9b66e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc14, dwReserved0=0x0, dwReserved1=0x0, cFileName="dull.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc18c7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8bc18c7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8bc18c7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1324, dwReserved0=0x0, dwReserved1=0x0, cFileName="dull_tauri.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bc18c7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8be7b21, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8be7b21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="emo.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8be7b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8be7b21, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8be7b21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf95, dwReserved0=0x0, dwReserved1=0x0, cFileName="envy.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8be7b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c0dd7f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c0dd7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0x0, cFileName="evilgrin.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c0dd7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c33fd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c33fd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15de, dwReserved0=0x0, dwReserved1=0x0, cFileName="facepalm.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c33fd8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c5a236, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c5a236, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="fingerscrossed.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c5a236, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c8048f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c8048f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1090, dwReserved0=0x0, dwReserved1=0x0, cFileName="flower.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c8048f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c8048f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c8048f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="giggle.png", cAlternateFileName="")) returned 1 [0070.352] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c8048f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ca66e8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ca66e8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1462, dwReserved0=0x0, dwReserved1=0x0, cFileName="handshake.png", cAlternateFileName="")) returned 1 [0070.353] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca66e8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ccc946, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ccc946, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="happy.png", cAlternateFileName="")) returned 1 [0070.353] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ccc946, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ccc946, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ccc946, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1589, dwReserved0=0x0, dwReserved1=0x0, cFileName="headbang.png", cAlternateFileName="")) returned 1 [0070.353] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ccc946, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ccc946, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ccc946, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="heart.png", cAlternateFileName="")) returned 1 [0070.353] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ccc946, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8cf2b9f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8cf2b9f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="heidy.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cf2b9f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d18dfd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d18dfd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x146f, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d18dfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d3f057, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d3f057, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="highfive.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d3f057, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d652b0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d652b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="hug.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d652b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d652b0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d652b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1787, dwReserved0=0x0, dwReserved1=0x0, cFileName="idea.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d652b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d652b0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d652b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x138d, dwReserved0=0x0, dwReserved1=0x0, cFileName="inlove.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d8b50e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d8b50e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d8b50e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1522, dwReserved0=0x0, dwReserved1=0x0, cFileName="itwasntme.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d8b50e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d8b50e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d8b50e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x112d, dwReserved0=0x0, dwReserved1=0x0, cFileName="kiss.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d8b50e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d8b50e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d8b50e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="lalala.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d8b50e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8db1767, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8db1767, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x155a, dwReserved0=0x0, dwReserved1=0x0, cFileName="lipssealed.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8db1767, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8db1767, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8db1767, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa55, dwReserved0=0x0, dwReserved1=0x0, cFileName="mail.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8db1767, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8db1767, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8db1767, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="makeup.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8db1767, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8dd79c0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8dd79c0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="malthe.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd79c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8dd79c0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8dd79c0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="mmm.png", cAlternateFileName="")) returned 1 [0070.354] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dd79c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8dfdc23, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8dfdc23, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="mooning.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfdc23, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8dfdc23, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8dfdc23, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="movie.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfdc23, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8dfdc23, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8dfdc23, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="muscle.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfdc23, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8e23e78, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8e23e78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa15, dwReserved0=0x0, dwReserved1=0x0, cFileName="music.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e23e78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8e23e78, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8e23e78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1104, dwReserved0=0x0, dwReserved1=0x0, cFileName="nerd.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e23e78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8e23e78, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8e23e78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ninja.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e23e78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8e4a0d6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8e4a0d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe66, dwReserved0=0x0, dwReserved1=0x0, cFileName="no.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4a0d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8e7032f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8e7032f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="nod.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7032f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8e7032f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8e7032f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1709, dwReserved0=0x0, dwReserved1=0x0, cFileName="oliver.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e9658d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8e9658d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8e9658d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1628, dwReserved0=0x0, dwReserved1=0x0, cFileName="party.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e9658d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ebc7e6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ebc7e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xddb, dwReserved0=0x0, dwReserved1=0x0, cFileName="phone.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc7e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ebc7e6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ebc7e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x22d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pizza.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebc7e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ee2a3f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ee2a3f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1335, dwReserved0=0x0, dwReserved1=0x0, cFileName="poolparty.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ee2a3f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8f08c9d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8f08c9d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="priidu.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f08c9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8f08c9d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8f08c9d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ca2, dwReserved0=0x0, dwReserved1=0x0, cFileName="puking.png", cAlternateFileName="")) returned 1 [0070.355] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f08c9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8f2eef6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8f2eef6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="punch.png", cAlternateFileName="")) returned 1 [0070.356] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2eef6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8f2eef6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8f2eef6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1245, dwReserved0=0x0, dwReserved1=0x0, cFileName="rain.png", cAlternateFileName="")) returned 1 [0070.356] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2eef6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8f2eef6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8f2eef6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1265, dwReserved0=0x0, dwReserved1=0x0, cFileName="rock.png", cAlternateFileName="")) returned 1 [0070.356] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f2eef6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8f55154, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8f55154, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1141, dwReserved0=0x0, dwReserved1=0x0, cFileName="rofl.png", cAlternateFileName="")) returned 1 [0070.356] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f55154, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8f55154, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8f55154, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="sadsmile.png", cAlternateFileName="")) returned 1 [0070.359] GetProcessHeap () returned 0x3150000 [0070.359] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0070.359] GetProcessHeap () returned 0x3150000 [0070.359] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0070.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Emoticons\\small\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9229e15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb067e10d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x97fd903, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0070.524] GetProcessHeap () returned 0x3150000 [0070.524] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0070.524] GetProcessHeap () returned 0x3150000 [0070.524] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0070.525] GetProcessHeap () returned 0x3150000 [0070.525] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0070.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Flags\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9823b5c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb067f17b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa4790d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0070.526] GetProcessHeap () returned 0x3150000 [0070.526] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0070.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Flags\\large\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9823b5c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa4790d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0070.535] GetProcessHeap () returned 0x3150000 [0070.535] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0070.535] GetProcessHeap () returned 0x3150000 [0070.535] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0070.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Designs\\Flags\\small\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4790d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb08d0d29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab6490e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0070.543] GetProcessHeap () returned 0x3150000 [0070.543] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0070.543] GetProcessHeap () returned 0x3150000 [0070.543] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0070.543] GetProcessHeap () returned 0x3150000 [0070.543] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0070.544] GetProcessHeap () returned 0x3150000 [0070.544] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.544] GetProcessHeap () returned 0x3150000 [0070.544] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7482940, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fb4c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7482940, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0070.544] GetProcessHeap () returned 0x3150000 [0070.544] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.545] GetProcessHeap () returned 0x3150000 [0070.545] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.545] GetProcessHeap () returned 0x3150000 [0070.545] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.545] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x137b8f21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0070.547] GetProcessHeap () returned 0x3150000 [0070.547] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0975177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x138053d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0070.548] GetProcessHeap () returned 0x3150000 [0070.548] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.548] GetProcessHeap () returned 0x3150000 [0070.548] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb09dc5d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1385188b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0070.550] GetProcessHeap () returned 0x3150000 [0070.550] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.550] GetProcessHeap () returned 0x3150000 [0070.550] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfec7dad, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0070.551] GetProcessHeap () returned 0x3150000 [0070.551] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.551] GetProcessHeap () returned 0x3150000 [0070.551] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.551] GetProcessHeap () returned 0x3150000 [0070.551] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfea1b47, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0070.553] GetProcessHeap () returned 0x3150000 [0070.553] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0a25f5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1374681a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0070.553] GetProcessHeap () returned 0x3150000 [0070.553] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.553] GetProcessHeap () returned 0x3150000 [0070.553] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfea1b47, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0a26390, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0070.553] GetProcessHeap () returned 0x3150000 [0070.553] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.553] GetProcessHeap () returned 0x3150000 [0070.553] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.553] GetProcessHeap () returned 0x3150000 [0070.553] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a85441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b9575e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0070.555] GetProcessHeap () returned 0x3150000 [0070.555] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a862ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9eace405, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0070.555] GetProcessHeap () returned 0x3150000 [0070.555] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.555] GetProcessHeap () returned 0x3150000 [0070.555] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5b9575e3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0070.555] GetProcessHeap () returned 0x3150000 [0070.555] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0070.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee7834, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0070.556] GetProcessHeap () returned 0x3150000 [0070.556] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0070.556] GetProcessHeap () returned 0x3150000 [0070.556] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.557] GetProcessHeap () returned 0x3150000 [0070.557] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.557] GetProcessHeap () returned 0x3150000 [0070.557] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8d19b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0ace717, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6ced31, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0070.559] GetProcessHeap () returned 0x3150000 [0070.559] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb321a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0acfda8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9ebb321a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0070.559] GetProcessHeap () returned 0x3150000 [0070.559] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.560] GetProcessHeap () returned 0x3150000 [0070.560] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5b6ced31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe665ae03, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe665ae03, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0070.560] GetProcessHeap () returned 0x3150000 [0070.560] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0070.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe665ae03, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe665ae03, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe665ae03, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0070.560] GetProcessHeap () returned 0x3150000 [0070.560] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0070.560] GetProcessHeap () returned 0x3150000 [0070.560] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.560] GetProcessHeap () returned 0x3150000 [0070.561] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.561] GetProcessHeap () returned 0x3150000 [0070.561] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc9b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13a1d82, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb13a1d82, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0070.632] GetProcessHeap () returned 0x3150000 [0070.632] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1348e69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0b1b1e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1348e69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0070.632] GetProcessHeap () returned 0x3150000 [0070.632] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.632] GetProcessHeap () returned 0x3150000 [0070.632] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.632] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb13a1d82, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0070.633] GetProcessHeap () returned 0x3150000 [0070.633] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0070.635] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec3ce583, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0070.638] GetProcessHeap () returned 0x3150000 [0070.638] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0070.638] GetProcessHeap () returned 0x3150000 [0070.638] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.638] GetProcessHeap () returned 0x3150000 [0070.638] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.639] GetProcessHeap () returned 0x3150000 [0070.639] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.639] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1538d09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d397aa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb0d397aa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0070.643] GetProcessHeap () returned 0x3150000 [0070.643] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x155ef67, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0bda2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x155ef67, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0070.644] GetProcessHeap () returned 0x3150000 [0070.644] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.644] GetProcessHeap () returned 0x3150000 [0070.644] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.644] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb0d397aa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0070.645] GetProcessHeap () returned 0x3150000 [0070.645] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0070.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec1de6d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0070.646] GetProcessHeap () returned 0x3150000 [0070.646] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0070.646] GetProcessHeap () returned 0x3150000 [0070.646] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.646] GetProcessHeap () returned 0x3150000 [0070.646] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.647] GetProcessHeap () returned 0x3150000 [0070.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0070.649] GetProcessHeap () returned 0x3150000 [0070.649] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0c2f555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7e7ba3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0070.661] GetProcessHeap () returned 0x3150000 [0070.661] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.661] GetProcessHeap () returned 0x3150000 [0070.661] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe098276e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0c2fbb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe098276e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0070.662] GetProcessHeap () returned 0x3150000 [0070.662] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.662] GetProcessHeap () returned 0x3150000 [0070.662] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.663] GetProcessHeap () returned 0x3150000 [0070.663] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8150701, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0070.690] GetProcessHeap () returned 0x3150000 [0070.690] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d1f064, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa819cbaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0070.690] GetProcessHeap () returned 0x3150000 [0070.690] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.690] GetProcessHeap () returned 0x3150000 [0070.690] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d716f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0070.693] GetProcessHeap () returned 0x3150000 [0070.693] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.693] GetProcessHeap () returned 0x3150000 [0070.693] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa820f2c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d721ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0070.693] GetProcessHeap () returned 0x3150000 [0070.693] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.693] GetProcessHeap () returned 0x3150000 [0070.693] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe09a894e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc770c60a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc770c60a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0070.693] GetProcessHeap () returned 0x3150000 [0070.693] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0070.694] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc770c60a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc770c60a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc770c60a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0070.694] GetProcessHeap () returned 0x3150000 [0070.694] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0070.694] GetProcessHeap () returned 0x3150000 [0070.694] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.695] GetProcessHeap () returned 0x3150000 [0070.695] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.695] GetProcessHeap () returned 0x3150000 [0070.695] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.695] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe563d29, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0e615f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x716c6041, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0070.697] GetProcessHeap () returned 0x3150000 [0070.697] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.697] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0f30e8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbe5b019c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0070.699] GetProcessHeap () returned 0x3150000 [0070.699] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.699] GetProcessHeap () returned 0x3150000 [0070.699] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.699] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x716c6041, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xb0f31d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x716c6041, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0070.700] GetProcessHeap () returned 0x3150000 [0070.700] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.700] GetProcessHeap () returned 0x3150000 [0070.700] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.701] GetProcessHeap () returned 0x3150000 [0070.701] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d169f9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0070.702] GetProcessHeap () returned 0x3150000 [0070.702] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.702] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d3cc52, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0f84b23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0070.704] GetProcessHeap () returned 0x3150000 [0070.704] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.704] GetProcessHeap () returned 0x3150000 [0070.704] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.704] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0f85922, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0070.872] GetProcessHeap () returned 0x3150000 [0070.872] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0070.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb104434a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0070.875] GetProcessHeap () returned 0x3150000 [0070.875] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0070.875] GetProcessHeap () returned 0x3150000 [0070.875] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.876] GetProcessHeap () returned 0x3150000 [0070.876] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0070.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0070.877] GetProcessHeap () returned 0x3150000 [0070.877] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0070.877] GetProcessHeap () returned 0x3150000 [0070.877] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0070.877] GetProcessHeap () returned 0x3150000 [0070.877] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0070.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86e61487, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0071.038] GetProcessHeap () returned 0x3150000 [0071.038] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ead93a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb10a896e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0071.041] GetProcessHeap () returned 0x3150000 [0071.041] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.041] GetProcessHeap () returned 0x3150000 [0071.041] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb10a9b5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0071.042] GetProcessHeap () returned 0x3150000 [0071.042] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.042] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1139167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86f5a04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0071.044] GetProcessHeap () returned 0x3150000 [0071.044] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.045] GetProcessHeap () returned 0x3150000 [0071.045] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.045] GetProcessHeap () returned 0x3150000 [0071.045] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.045] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0071.045] GetProcessHeap () returned 0x3150000 [0071.045] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.045] GetProcessHeap () returned 0x3150000 [0071.045] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.046] GetProcessHeap () returned 0x3150000 [0071.046] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.046] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845121d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0071.046] GetProcessHeap () returned 0x3150000 [0071.046] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113db64, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0071.047] GetProcessHeap () returned 0x3150000 [0071.047] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.047] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113ea79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0071.047] GetProcessHeap () returned 0x3150000 [0071.047] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.047] GetProcessHeap () returned 0x3150000 [0071.047] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.047] GetProcessHeap () returned 0x3150000 [0071.048] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845848da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113f7c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x845848da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0071.048] GetProcessHeap () returned 0x3150000 [0071.048] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.048] GetProcessHeap () returned 0x3150000 [0071.048] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8468f958, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb120ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85423bf4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0071.051] GetProcessHeap () returned 0x3150000 [0071.051] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.051] GetProcessHeap () returned 0x3150000 [0071.051] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Bing.Immersive\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x854700ab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb120f88d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x854700ab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0071.052] GetProcessHeap () returned 0x3150000 [0071.052] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.052] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Bing.Immersive\\Shaders\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x854700ab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1210963, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8549630e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.052] GetProcessHeap () returned 0x3150000 [0071.052] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.052] GetProcessHeap () returned 0x3150000 [0071.052] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.053] GetProcessHeap () returned 0x3150000 [0071.053] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.AppTk.NativeDirect3d.UAP\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8565ff4b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1211054, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8565ff4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0071.053] GetProcessHeap () returned 0x3150000 [0071.053] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.053] GetProcessHeap () returned 0x3150000 [0071.053] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.VideoTk\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85744d6c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1306fa7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x857b747c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0071.055] GetProcessHeap () returned 0x3150000 [0071.055] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.055] GetProcessHeap () returned 0x3150000 [0071.055] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x857b747c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1308123, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0071.057] GetProcessHeap () returned 0x3150000 [0071.057] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.058] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x857b747c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136b57a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85803933, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0071.060] GetProcessHeap () returned 0x3150000 [0071.060] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.060] GetProcessHeap () returned 0x3150000 [0071.060] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\CinemagraphDelegate\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85830f47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136be4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85830f47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0071.060] GetProcessHeap () returned 0x3150000 [0071.060] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.060] GetProcessHeap () returned 0x3150000 [0071.060] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Common\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85830f47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136cb5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85830f47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0071.060] GetProcessHeap () returned 0x3150000 [0071.060] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.060] GetProcessHeap () returned 0x3150000 [0071.060] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.060] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\CompositeSurface\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136d809, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0071.061] GetProcessHeap () returned 0x3150000 [0071.061] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.061] GetProcessHeap () returned 0x3150000 [0071.061] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\JpegSurface\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136e08a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0071.061] GetProcessHeap () returned 0x3150000 [0071.061] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.061] GetProcessHeap () returned 0x3150000 [0071.061] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136e5d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8587d423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0071.061] GetProcessHeap () returned 0x3150000 [0071.061] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0071.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\Preview\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136f0e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0071.062] GetProcessHeap () returned 0x3150000 [0071.062] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0071.062] GetProcessHeap () returned 0x3150000 [0071.062] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0071.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\Sequence\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x858571c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb136fa8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x858571c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0071.063] GetProcessHeap () returned 0x3150000 [0071.063] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0071.063] GetProcessHeap () returned 0x3150000 [0071.063] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0071.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\Video\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8587d423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13701c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8587d423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0071.063] GetProcessHeap () returned 0x3150000 [0071.063] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0071.063] GetProcessHeap () returned 0x3150000 [0071.063] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0071.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Lumia.ViewerPlugin\\ReliveSurfaces\\ZoomPan\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8587d423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13708b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8587d423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0071.063] GetProcessHeap () returned 0x3150000 [0071.064] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0071.064] GetProcessHeap () returned 0x3150000 [0071.064] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.064] GetProcessHeap () returned 0x3150000 [0071.064] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.064] GetProcessHeap () returned 0x3150000 [0071.064] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec4ff828, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec4ff828, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.065] GetProcessHeap () returned 0x3150000 [0071.065] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.065] GetProcessHeap () returned 0x3150000 [0071.065] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\PhotosApp\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8644bef6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1371afa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86472154, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0071.065] GetProcessHeap () returned 0x3150000 [0071.065] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\PhotosApp\\Assets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86472154, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1372638, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86472154, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0071.065] GetProcessHeap () returned 0x3150000 [0071.065] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0071.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\PhotosApp\\Assets\\ThirdPartyNotices\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86472154, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13730f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86472154, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0071.066] GetProcessHeap () returned 0x3150000 [0071.066] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0071.066] GetProcessHeap () returned 0x3150000 [0071.066] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.067] GetProcessHeap () returned 0x3150000 [0071.067] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.067] GetProcessHeap () returned 0x3150000 [0071.067] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.067] GetProcessHeap () returned 0x3150000 [0071.067] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0071.069] GetProcessHeap () returned 0x3150000 [0071.069] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13da82d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x84322329, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0071.069] GetProcessHeap () returned 0x3150000 [0071.070] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.070] GetProcessHeap () returned 0x3150000 [0071.070] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8c7dd6a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0071.070] GetProcessHeap () returned 0x3150000 [0071.070] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.070] GetProcessHeap () returned 0x3150000 [0071.070] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.070] GetProcessHeap () returned 0x3150000 [0071.070] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.072] GetProcessHeap () returned 0x3150000 [0071.072] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1437fbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4878db60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0071.255] GetProcessHeap () returned 0x3150000 [0071.255] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.255] GetProcessHeap () returned 0x3150000 [0071.255] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.255] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0071.257] GetProcessHeap () returned 0x3150000 [0071.257] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.257] GetProcessHeap () returned 0x3150000 [0071.257] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.257] GetProcessHeap () returned 0x3150000 [0071.257] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x479ad420, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0071.259] GetProcessHeap () returned 0x3150000 [0071.259] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a4c028, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb143a0a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47a4c028, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0071.260] GetProcessHeap () returned 0x3150000 [0071.260] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.260] GetProcessHeap () returned 0x3150000 [0071.260] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a7225c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1502df3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x48164a4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0071.269] GetProcessHeap () returned 0x3150000 [0071.269] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.269] GetProcessHeap () returned 0x3150000 [0071.269] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x85720f04, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x85720f04, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0071.269] GetProcessHeap () returned 0x3150000 [0071.269] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.269] GetProcessHeap () returned 0x3150000 [0071.269] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.276] GetProcessHeap () returned 0x3150000 [0071.276] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0071.278] GetProcessHeap () returned 0x3150000 [0071.278] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb15ba85a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47932bea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.279] GetProcessHeap () returned 0x3150000 [0071.279] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.279] GetProcessHeap () returned 0x3150000 [0071.279] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0071.279] GetProcessHeap () returned 0x3150000 [0071.279] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.280] GetProcessHeap () returned 0x3150000 [0071.280] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.280] GetProcessHeap () returned 0x3150000 [0071.280] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8c485e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0071.282] GetProcessHeap () returned 0x3150000 [0071.282] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.283] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c910d15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb160da7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4c9f5b36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.285] GetProcessHeap () returned 0x3150000 [0071.285] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.285] GetProcessHeap () returned 0x3150000 [0071.285] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee789c53, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0071.288] GetProcessHeap () returned 0x3150000 [0071.288] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.288] GetProcessHeap () returned 0x3150000 [0071.288] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.289] GetProcessHeap () returned 0x3150000 [0071.289] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c079ab6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0071.295] GetProcessHeap () returned 0x3150000 [0071.295] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c0c5f69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1610dce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4c0c5f69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.295] GetProcessHeap () returned 0x3150000 [0071.295] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.295] GetProcessHeap () returned 0x3150000 [0071.296] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c0ee003, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1753caa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4c55722f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0071.311] GetProcessHeap () returned 0x3150000 [0071.311] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.311] GetProcessHeap () returned 0x3150000 [0071.311] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee763a10, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc1bb8bed, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1bb8bed, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.313] GetProcessHeap () returned 0x3150000 [0071.313] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.313] GetProcessHeap () returned 0x3150000 [0071.313] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.313] GetProcessHeap () returned 0x3150000 [0071.313] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bcf41f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0071.432] GetProcessHeap () returned 0x3150000 [0071.432] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bd1a450, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb17a168b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4bd1a450, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.487] GetProcessHeap () returned 0x3150000 [0071.487] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.487] GetProcessHeap () returned 0x3150000 [0071.487] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee763a10, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0071.488] GetProcessHeap () returned 0x3150000 [0071.488] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.488] GetProcessHeap () returned 0x3150000 [0071.488] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.489] GetProcessHeap () returned 0x3150000 [0071.489] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924af4b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0071.491] GetProcessHeap () returned 0x3150000 [0071.491] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.491] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb184beda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x924d5709, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0071.492] GetProcessHeap () returned 0x3150000 [0071.492] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.492] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb18b5b34, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.494] GetProcessHeap () returned 0x3150000 [0071.494] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.494] GetProcessHeap () returned 0x3150000 [0071.494] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.494] GetProcessHeap () returned 0x3150000 [0071.494] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0071.495] GetProcessHeap () returned 0x3150000 [0071.495] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.495] GetProcessHeap () returned 0x3150000 [0071.495] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.496] GetProcessHeap () returned 0x3150000 [0071.496] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92a96d25, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.497] GetProcessHeap () returned 0x3150000 [0071.497] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb196874e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92ae31dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0071.498] GetProcessHeap () returned 0x3150000 [0071.498] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1a4790e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92d27c4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0071.500] GetProcessHeap () returned 0x3150000 [0071.500] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.500] GetProcessHeap () returned 0x3150000 [0071.500] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.500] GetProcessHeap () returned 0x3150000 [0071.500] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.500] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0071.501] GetProcessHeap () returned 0x3150000 [0071.501] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.501] GetProcessHeap () returned 0x3150000 [0071.501] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.502] GetProcessHeap () returned 0x3150000 [0071.502] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0071.504] GetProcessHeap () returned 0x3150000 [0071.504] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1ad3afc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91aa5e6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0071.504] GetProcessHeap () returned 0x3150000 [0071.504] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.504] GetProcessHeap () returned 0x3150000 [0071.505] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.505] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0eba822, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0071.505] GetProcessHeap () returned 0x3150000 [0071.505] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.505] GetProcessHeap () returned 0x3150000 [0071.505] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.506] GetProcessHeap () returned 0x3150000 [0071.506] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.506] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91d7ab3d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0071.507] GetProcessHeap () returned 0x3150000 [0071.507] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b532af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91dc6fe6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.508] GetProcessHeap () returned 0x3150000 [0071.508] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.508] GetProcessHeap () returned 0x3150000 [0071.508] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b53ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0071.509] GetProcessHeap () returned 0x3150000 [0071.509] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b54824, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0071.509] GetProcessHeap () returned 0x3150000 [0071.509] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.509] GetProcessHeap () returned 0x3150000 [0071.509] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c1b81a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e1349e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.511] GetProcessHeap () returned 0x3150000 [0071.511] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.511] GetProcessHeap () returned 0x3150000 [0071.511] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.511] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e1349e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c1c741, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0071.512] GetProcessHeap () returned 0x3150000 [0071.512] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.512] GetProcessHeap () returned 0x3150000 [0071.512] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e396fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c9ee0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92141e7c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0071.516] GetProcessHeap () returned 0x3150000 [0071.516] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.517] GetProcessHeap () returned 0x3150000 [0071.517] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.517] GetProcessHeap () returned 0x3150000 [0071.517] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0eba822, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb1ca075e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.518] GetProcessHeap () returned 0x3150000 [0071.518] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.518] GetProcessHeap () returned 0x3150000 [0071.518] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.518] GetProcessHeap () returned 0x3150000 [0071.518] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182554a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78f971b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78f971b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0071.519] GetProcessHeap () returned 0x3150000 [0071.519] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18314067, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1cf6222, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x18314067, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.520] GetProcessHeap () returned 0x3150000 [0071.520] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.520] GetProcessHeap () returned 0x3150000 [0071.520] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186f3da6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1d89b7d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x187b296e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0071.522] GetProcessHeap () returned 0x3150000 [0071.522] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.522] GetProcessHeap () returned 0x3150000 [0071.522] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x187f4c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1e11b3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x189221ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.800] GetProcessHeap () returned 0x3150000 [0071.800] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.800] GetProcessHeap () returned 0x3150000 [0071.800] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x189948d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1e12880, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x189948d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0071.800] GetProcessHeap () returned 0x3150000 [0071.800] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.800] GetProcessHeap () returned 0x3150000 [0071.800] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.800] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x199ac747, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1f59bda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1d9063ff, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0071.809] GetProcessHeap () returned 0x3150000 [0071.809] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.810] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1aa1da70, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb20a74ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1b6ddbe6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0071.820] GetProcessHeap () returned 0x3150000 [0071.820] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.820] GetProcessHeap () returned 0x3150000 [0071.820] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0071.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b72a09e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb213bc33, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1c4bf701, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0071.831] GetProcessHeap () returned 0x3150000 [0071.831] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0071.839] GetProcessHeap () returned 0x3150000 [0071.839] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.839] GetProcessHeap () returned 0x3150000 [0071.839] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf78f971b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf78f971b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78f971b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0071.840] GetProcessHeap () returned 0x3150000 [0071.840] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.840] GetProcessHeap () returned 0x3150000 [0071.840] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.840] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\models\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dad0045, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb21bd0e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1dd36a78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0071.842] GetProcessHeap () returned 0x3150000 [0071.842] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.842] GetProcessHeap () returned 0x3150000 [0071.842] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.842] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\sr-cyrl-cs\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x203a8a50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb21be58d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x203a8a50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0071.843] GetProcessHeap () returned 0x3150000 [0071.843] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.843] GetProcessHeap () returned 0x3150000 [0071.843] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\sr-latn-cs\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x203a8a50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb21bf209, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x203a8a50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.843] GetProcessHeap () returned 0x3150000 [0071.843] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.843] GetProcessHeap () returned 0x3150000 [0071.843] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.843] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\telemetryrules\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x203ceca9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb21bffdc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x203f4f02, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0071.843] GetProcessHeap () returned 0x3150000 [0071.843] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.843] GetProcessHeap () returned 0x3150000 [0071.843] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.844] GetProcessHeap () returned 0x3150000 [0071.844] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181968dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78d353e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0071.847] GetProcessHeap () returned 0x3150000 [0071.847] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181bcb35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2264955, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x181bcb35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0071.848] GetProcessHeap () returned 0x3150000 [0071.848] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.848] GetProcessHeap () returned 0x3150000 [0071.848] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0071.848] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf78d353e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb2264fc2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0071.848] GetProcessHeap () returned 0x3150000 [0071.848] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0071.848] GetProcessHeap () returned 0x3150000 [0071.848] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0071.849] GetProcessHeap () returned 0x3150000 [0071.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0071.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f88bbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0072.161] GetProcessHeap () returned 0x3150000 [0072.161] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.161] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50faee11, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb236c85a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51099929, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0072.164] GetProcessHeap () returned 0x3150000 [0072.164] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.164] GetProcessHeap () returned 0x3150000 [0072.164] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.164] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97d1eca, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0072.165] GetProcessHeap () returned 0x3150000 [0072.165] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.165] GetProcessHeap () returned 0x3150000 [0072.165] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.165] GetProcessHeap () returned 0x3150000 [0072.165] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.166] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0072.167] GetProcessHeap () returned 0x3150000 [0072.167] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb23d70f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4ff71b46, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0072.167] GetProcessHeap () returned 0x3150000 [0072.167] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.168] GetProcessHeap () returned 0x3150000 [0072.168] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97abca3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0072.168] GetProcessHeap () returned 0x3150000 [0072.168] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.168] GetProcessHeap () returned 0x3150000 [0072.168] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.169] GetProcessHeap () returned 0x3150000 [0072.169] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.169] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5011552a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0072.171] GetProcessHeap () returned 0x3150000 [0072.171] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5013b788, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb23d8b82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x501619e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0072.171] GetProcessHeap () returned 0x3150000 [0072.171] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.171] GetProcessHeap () returned 0x3150000 [0072.171] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.171] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50187c3b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb24969c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50509bf1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0072.173] GetProcessHeap () returned 0x3150000 [0072.173] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0072.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x501ade99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2497e66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x501ade99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0072.175] GetProcessHeap () returned 0x3150000 [0072.175] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0072.177] GetProcessHeap () returned 0x3150000 [0072.177] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0072.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Retail\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504bd736, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2498947, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x504e398f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0072.177] GetProcessHeap () returned 0x3150000 [0072.178] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0072.178] GetProcessHeap () returned 0x3150000 [0072.178] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0072.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\ThankYou\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x504e398f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2499429, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50509bf1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0072.178] GetProcessHeap () returned 0x3150000 [0072.178] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0072.178] GetProcessHeap () returned 0x3150000 [0072.178] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.178] GetProcessHeap () returned 0x3150000 [0072.178] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\HoloAssets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x505560a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb249a097, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x505560a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0072.179] GetProcessHeap () returned 0x3150000 [0072.179] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.179] GetProcessHeap () returned 0x3150000 [0072.179] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97abca3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbeb29071, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbeb29071, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cf8 [0072.179] GetProcessHeap () returned 0x3150000 [0072.179] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.179] GetProcessHeap () returned 0x3150000 [0072.179] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Styling\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e0b429, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb249b3d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50e0b429, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0072.180] GetProcessHeap () returned 0x3150000 [0072.180] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0072.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Styling\\css\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e0b429, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb249c186, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50e31682, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0072.180] GetProcessHeap () returned 0x3150000 [0072.180] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0072.180] GetProcessHeap () returned 0x3150000 [0072.180] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.181] GetProcessHeap () returned 0x3150000 [0072.181] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.181] GetProcessHeap () returned 0x3150000 [0072.181] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aea982c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0072.183] GetProcessHeap () returned 0x3150000 [0072.183] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aea982c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb253a43f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8aea982c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0072.183] GetProcessHeap () returned 0x3150000 [0072.183] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.183] GetProcessHeap () returned 0x3150000 [0072.183] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd4ea481, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0072.184] GetProcessHeap () returned 0x3150000 [0072.185] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.185] GetProcessHeap () returned 0x3150000 [0072.185] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.185] GetProcessHeap () returned 0x3150000 [0072.185] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d01521b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd5106b5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd5106b5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0072.187] GetProcessHeap () returned 0x3150000 [0072.187] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.187] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d0fa03c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb253d3a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d25784d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0072.187] GetProcessHeap () returned 0x3150000 [0072.187] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0072.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d0fa03c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb25946d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d198c81, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0072.189] GetProcessHeap () returned 0x3150000 [0072.189] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0072.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d0fa03c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb25f5277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d12029a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0072.192] GetProcessHeap () returned 0x3150000 [0072.192] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0072.192] GetProcessHeap () returned 0x3150000 [0072.192] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0072.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d12029a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb263e5bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d172a07, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0072.195] GetProcessHeap () returned 0x3150000 [0072.195] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0072.195] GetProcessHeap () returned 0x3150000 [0072.195] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0072.196] GetProcessHeap () returned 0x3150000 [0072.196] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0072.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\Images\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d198c81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb263f1df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d198c81, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0072.196] GetProcessHeap () returned 0x3150000 [0072.196] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0072.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\Images\\Ratings\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d198c81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb26aeba4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2315ef, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0072.198] GetProcessHeap () returned 0x3150000 [0072.198] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0072.198] GetProcessHeap () returned 0x3150000 [0072.198] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0072.198] GetProcessHeap () returned 0x3150000 [0072.198] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5791be8 [0072.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb26afa42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d733784, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1ff8 [0072.199] GetProcessHeap () returned 0x3150000 [0072.199] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0072.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb26b084c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2a3d00, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0072.331] GetProcessHeap () returned 0x3150000 [0072.331] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0072.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb273bedf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d27daa6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0072.333] GetProcessHeap () returned 0x3150000 [0072.333] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0072.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\contrast-black\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb273ce6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d25784d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0072.333] GetProcessHeap () returned 0x3150000 [0072.333] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0072.333] GetProcessHeap () returned 0x3150000 [0072.333] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0072.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\contrast-white\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d25784d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb273db4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d27daa6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0072.334] GetProcessHeap () returned 0x3150000 [0072.334] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0072.334] GetProcessHeap () returned 0x3150000 [0072.334] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0072.334] GetProcessHeap () returned 0x3150000 [0072.334] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0072.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2a3d00, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb27a8e4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2c9f5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0072.336] GetProcessHeap () returned 0x3150000 [0072.336] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0072.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\contrast-black\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2a3d00, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb27a9e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2a3d00, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0072.336] GetProcessHeap () returned 0x3150000 [0072.336] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0072.336] GetProcessHeap () returned 0x3150000 [0072.336] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0072.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\contrast-white\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2a3d00, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb27aa7bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2c9f5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0072.336] GetProcessHeap () returned 0x3150000 [0072.336] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0072.336] GetProcessHeap () returned 0x3150000 [0072.336] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0072.336] GetProcessHeap () returned 0x3150000 [0072.336] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0072.337] GetProcessHeap () returned 0x3150000 [0072.337] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0072.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2c9f5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb27f7692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2f25ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0072.339] GetProcessHeap () returned 0x3150000 [0072.339] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0072.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\contrast-black\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2c9f5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb287144a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2c9f5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0072.342] GetProcessHeap () returned 0x3150000 [0072.342] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0072.342] GetProcessHeap () returned 0x3150000 [0072.342] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0072.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\contrast-white\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d2f25ea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb28bfbaf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d2f25ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0072.344] GetProcessHeap () returned 0x3150000 [0072.344] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0072.344] GetProcessHeap () returned 0x3150000 [0072.344] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0072.345] GetProcessHeap () returned 0x3150000 [0072.345] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0072.345] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb28c0a27, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d51986a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0072.345] GetProcessHeap () returned 0x3150000 [0072.345] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0072.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb28c1827, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d368a9d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0072.346] GetProcessHeap () returned 0x3150000 [0072.346] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0072.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb290fc02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d33eac2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0072.348] GetProcessHeap () returned 0x3150000 [0072.348] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0072.348] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29109e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d318869, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0072.349] GetProcessHeap () returned 0x3150000 [0072.349] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0072.349] GetProcessHeap () returned 0x3150000 [0072.349] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0072.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d318869, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb291154c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d33eac2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0072.349] GetProcessHeap () returned 0x3150000 [0072.349] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0072.349] GetProcessHeap () returned 0x3150000 [0072.349] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0072.349] GetProcessHeap () returned 0x3150000 [0072.349] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0072.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d368a9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2956f28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d390da3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0072.350] GetProcessHeap () returned 0x3150000 [0072.350] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0072.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d368a9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2957dbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d36ab20, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0072.351] GetProcessHeap () returned 0x3150000 [0072.351] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0072.351] GetProcessHeap () returned 0x3150000 [0072.351] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0072.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d36ab20, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29586aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d390da3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0072.351] GetProcessHeap () returned 0x3150000 [0072.351] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0072.351] GetProcessHeap () returned 0x3150000 [0072.351] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0072.351] GetProcessHeap () returned 0x3150000 [0072.352] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0072.352] GetProcessHeap () returned 0x3150000 [0072.352] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0072.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d390da3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2959420, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4034b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0072.353] GetProcessHeap () returned 0x3150000 [0072.353] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0072.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d390da3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29bb252, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4034b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0072.354] GetProcessHeap () returned 0x3150000 [0072.354] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0072.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d390da3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29bc390, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d3b6ffc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0072.355] GetProcessHeap () returned 0x3150000 [0072.355] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0072.355] GetProcessHeap () returned 0x3150000 [0072.355] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0072.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d3b6ffc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb29bcc45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d3dd25a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0072.355] GetProcessHeap () returned 0x3150000 [0072.355] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0072.355] GetProcessHeap () returned 0x3150000 [0072.355] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0072.356] GetProcessHeap () returned 0x3150000 [0072.356] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0072.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4034b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a0b8ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d44f96b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0072.357] GetProcessHeap () returned 0x3150000 [0072.357] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0072.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4034b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a0c5bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4034b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0072.357] GetProcessHeap () returned 0x3150000 [0072.357] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0072.357] GetProcessHeap () returned 0x3150000 [0072.357] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0072.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d42970d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a0cbbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d42970d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0072.556] GetProcessHeap () returned 0x3150000 [0072.556] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0072.557] GetProcessHeap () returned 0x3150000 [0072.557] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0072.557] GetProcessHeap () returned 0x3150000 [0072.557] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0072.558] GetProcessHeap () returned 0x3150000 [0072.558] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0072.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d44f96b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a0dbbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4c207b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0072.559] GetProcessHeap () returned 0x3150000 [0072.559] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d44f96b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a5dcf9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4c207b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0072.561] GetProcessHeap () returned 0x3150000 [0072.561] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0072.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d44f96b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a5ee8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d475bc4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0072.561] GetProcessHeap () returned 0x3150000 [0072.561] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0072.561] GetProcessHeap () returned 0x3150000 [0072.561] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0072.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d475bc4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2a5f62e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d49be1d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0072.562] GetProcessHeap () returned 0x3150000 [0072.562] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0072.562] GetProcessHeap () returned 0x3150000 [0072.562] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.563] GetProcessHeap () returned 0x3150000 [0072.563] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4c207b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ab3fd5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d51986a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0072.565] GetProcessHeap () returned 0x3150000 [0072.565] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0072.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4c207b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ab4bf2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4edfec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0072.565] GetProcessHeap () returned 0x3150000 [0072.565] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0072.565] GetProcessHeap () returned 0x3150000 [0072.565] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0072.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4f35ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ab52e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d4f35ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0072.565] GetProcessHeap () returned 0x3150000 [0072.565] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0072.565] GetProcessHeap () returned 0x3150000 [0072.566] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.566] GetProcessHeap () returned 0x3150000 [0072.566] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0072.566] GetProcessHeap () returned 0x3150000 [0072.566] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0072.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d51986a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ab5f49, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d565d22, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0072.567] GetProcessHeap () returned 0x3150000 [0072.567] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d51986a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2aff91b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d565d22, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0072.569] GetProcessHeap () returned 0x3150000 [0072.569] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0072.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d51986a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b006c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d53fac4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0072.569] GetProcessHeap () returned 0x3150000 [0072.569] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0072.569] GetProcessHeap () returned 0x3150000 [0072.569] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0072.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d53fac4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b00f23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d53fac4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0072.570] GetProcessHeap () returned 0x3150000 [0072.570] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0072.570] GetProcessHeap () returned 0x3150000 [0072.570] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.570] GetProcessHeap () returned 0x3150000 [0072.570] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d565d22, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b5c666, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d5b21d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0072.571] GetProcessHeap () returned 0x3150000 [0072.571] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0072.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d565d22, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b5e29a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d58bf7b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0072.572] GetProcessHeap () returned 0x3150000 [0072.572] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0072.572] GetProcessHeap () returned 0x3150000 [0072.572] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0072.572] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d58bf7b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2b5ed79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d5b21d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0072.572] GetProcessHeap () returned 0x3150000 [0072.572] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0072.572] GetProcessHeap () returned 0x3150000 [0072.572] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.573] GetProcessHeap () returned 0x3150000 [0072.573] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0072.573] GetProcessHeap () returned 0x3150000 [0072.573] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0072.573] GetProcessHeap () returned 0x3150000 [0072.573] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0072.574] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d5d8432, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ba78f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d64ab43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0072.575] GetProcessHeap () returned 0x3150000 [0072.575] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\contrast-black\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d5d8432, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ba8ace, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d5d8432, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0072.576] GetProcessHeap () returned 0x3150000 [0072.576] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.576] GetProcessHeap () returned 0x3150000 [0072.576] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.576] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\contrast-white\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d5d8432, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ba9318, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d5fe690, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0072.576] GetProcessHeap () returned 0x3150000 [0072.576] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.577] GetProcessHeap () returned 0x3150000 [0072.577] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0072.577] GetProcessHeap () returned 0x3150000 [0072.577] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0072.577] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d64ab43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c19005, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d696ffa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0072.579] GetProcessHeap () returned 0x3150000 [0072.579] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\contrast-black\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d64ab43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c19f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d670d9c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0072.579] GetProcessHeap () returned 0x3150000 [0072.579] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.579] GetProcessHeap () returned 0x3150000 [0072.579] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.579] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\contrast-white\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d670d9c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c1a7b0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d696ffa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0072.580] GetProcessHeap () returned 0x3150000 [0072.580] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.580] GetProcessHeap () returned 0x3150000 [0072.580] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0072.582] GetProcessHeap () returned 0x3150000 [0072.582] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0072.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d696ffa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c3062e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d733784, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0072.583] GetProcessHeap () returned 0x3150000 [0072.583] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\contrast-black\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d696ffa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c31253, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d6bd253, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0072.584] GetProcessHeap () returned 0x3150000 [0072.584] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.584] GetProcessHeap () returned 0x3150000 [0072.584] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\contrast-white\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d6bd253, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c31b07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d70d530, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0072.584] GetProcessHeap () returned 0x3150000 [0072.584] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.584] GetProcessHeap () returned 0x3150000 [0072.584] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0072.585] GetProcessHeap () returned 0x3150000 [0072.585] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31ed920 [0072.585] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d733784, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c99e2e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d77fc3b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0072.587] GetProcessHeap () returned 0x3150000 [0072.587] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\contrast-black\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d733784, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c9b0f4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d7599e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0072.587] GetProcessHeap () returned 0x3150000 [0072.587] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.587] GetProcessHeap () returned 0x3150000 [0072.587] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.587] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\contrast-white\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d7599e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2c9bc21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d7599e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0072.588] GetProcessHeap () returned 0x3150000 [0072.588] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.588] GetProcessHeap () returned 0x3150000 [0072.588] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31ed920 | out: hHeap=0x3150000) returned 1 [0072.588] GetProcessHeap () returned 0x3150000 [0072.588] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5791be8 | out: hHeap=0x3150000) returned 1 [0072.588] GetProcessHeap () returned 0x3150000 [0072.589] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.589] GetProcessHeap () returned 0x3150000 [0072.589] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.589] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd5106b5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfd5106b5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd5106b5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0072.590] GetProcessHeap () returned 0x3150000 [0072.590] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0072.590] GetProcessHeap () returned 0x3150000 [0072.590] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.590] GetProcessHeap () returned 0x3150000 [0072.590] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0072.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b07346e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0072.802] GetProcessHeap () returned 0x3150000 [0072.802] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0072.802] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppCore\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ced312, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0072.802] GetProcessHeap () returned 0x3150000 [0072.802] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0072.803] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppCore\\Location\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2cee18a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0072.803] GetProcessHeap () returned 0x3150000 [0072.803] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.804] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppCore\\Location\\Shifter\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ceec4f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0072.804] GetProcessHeap () returned 0x3150000 [0072.804] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.804] GetProcessHeap () returned 0x3150000 [0072.804] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0072.805] GetProcessHeap () returned 0x3150000 [0072.805] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0072.805] GetProcessHeap () returned 0x3150000 [0072.805] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0072.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2cef683, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0072.805] GetProcessHeap () returned 0x3150000 [0072.805] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0072.805] GetProcessHeap () returned 0x3150000 [0072.805] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0072.805] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2cf0464, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c38a336, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0072.807] GetProcessHeap () returned 0x3150000 [0072.807] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0072.807] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2e0460d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b3cb0d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0072.810] GetProcessHeap () returned 0x3150000 [0072.810] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.811] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2e8edc6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b1d14c0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0072.813] GetProcessHeap () returned 0x3150000 [0072.813] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.813] GetProcessHeap () returned 0x3150000 [0072.813] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b1f771a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2e902ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2e62aa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0072.816] GetProcessHeap () returned 0x3150000 [0072.816] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.816] GetProcessHeap () returned 0x3150000 [0072.816] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0072.816] GetProcessHeap () returned 0x3150000 [0072.816] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0072.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3cb0d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2e90b88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b3cb0d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0072.816] GetProcessHeap () returned 0x3150000 [0072.816] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0072.816] GetProcessHeap () returned 0x3150000 [0072.816] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0072.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3cb0d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2efb6c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b4afef1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0072.818] GetProcessHeap () returned 0x3150000 [0072.818] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\LayersControl\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3cb0d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2efbe2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b3f1329, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0072.819] GetProcessHeap () returned 0x3150000 [0072.819] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.819] GetProcessHeap () returned 0x3150000 [0072.819] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\PrintAndShare\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b3f1329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2f3152f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b4afef1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0072.821] GetProcessHeap () returned 0x3150000 [0072.821] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.821] GetProcessHeap () returned 0x3150000 [0072.821] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\RadialControl\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4afef1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2fc69fb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b4afef1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0072.823] GetProcessHeap () returned 0x3150000 [0072.823] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.823] GetProcessHeap () returned 0x3150000 [0072.823] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Images\\Ratings\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4afef1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ff63a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b4d614a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0072.825] GetProcessHeap () returned 0x3150000 [0072.825] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.825] GetProcessHeap () returned 0x3150000 [0072.825] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0072.826] GetProcessHeap () returned 0x3150000 [0072.826] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0072.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\LiveTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b4fc3a8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3087d01, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b76acf2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0072.829] GetProcessHeap () returned 0x3150000 [0072.829] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0072.829] GetProcessHeap () returned 0x3150000 [0072.829] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0072.829] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b8e847d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30890e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c2f19a3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0072.830] GetProcessHeap () returned 0x3150000 [0072.830] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b8e847d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3089937, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ba3f9af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0072.831] GetProcessHeap () returned 0x3150000 [0072.831] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.831] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b8e847d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30f908c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ba19755, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0072.833] GetProcessHeap () returned 0x3150000 [0072.833] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0072.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\contrast-black\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b8e847d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30f9fa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b980de7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0072.834] GetProcessHeap () returned 0x3150000 [0072.834] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0072.834] GetProcessHeap () returned 0x3150000 [0072.834] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0072.834] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\LTR\\contrast-white\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b9a7045, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30fa4e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b9f34f7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0072.834] GetProcessHeap () returned 0x3150000 [0072.834] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0072.835] GetProcessHeap () returned 0x3150000 [0072.835] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.835] GetProcessHeap () returned 0x3150000 [0072.835] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.835] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ba3f9af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30fb71e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bad9e55, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0072.836] GetProcessHeap () returned 0x3150000 [0072.836] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0072.836] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\contrast-black\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ba3f9af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30fbf46, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ba8be66, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0072.837] GetProcessHeap () returned 0x3150000 [0072.837] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0072.837] GetProcessHeap () returned 0x3150000 [0072.837] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0072.837] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Car\\RTL\\contrast-white\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ba8be66, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb30fc3a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bab3bcd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0072.837] GetProcessHeap () returned 0x3150000 [0072.837] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0072.837] GetProcessHeap () returned 0x3150000 [0072.837] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.837] GetProcessHeap () returned 0x3150000 [0072.837] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.838] GetProcessHeap () returned 0x3150000 [0072.838] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.839] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bad9e55, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb314cc17, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bb73c04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0072.990] GetProcessHeap () returned 0x3150000 [0072.990] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\contrast-black\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bad9e55, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb31cde56, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bb000a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0072.992] GetProcessHeap () returned 0x3150000 [0072.992] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.992] GetProcessHeap () returned 0x3150000 [0072.992] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Collections\\contrast-white\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb26303, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3233df3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bb4c561, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0072.995] GetProcessHeap () returned 0x3150000 [0072.995] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0072.995] GetProcessHeap () returned 0x3150000 [0072.995] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0072.995] GetProcessHeap () returned 0x3150000 [0072.995] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0072.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb73c04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb32348f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c003fae, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0072.996] GetProcessHeap () returned 0x3150000 [0072.996] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0072.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb73c04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb323545e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bc327f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0072.996] GetProcessHeap () returned 0x3150000 [0072.996] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0072.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb73c04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb32914e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bc0c598, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0072.998] GetProcessHeap () returned 0x3150000 [0072.998] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0072.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb73c04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb32922fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bb99e88, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0072.999] GetProcessHeap () returned 0x3150000 [0072.999] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0072.999] GetProcessHeap () returned 0x3150000 [0072.999] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0072.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\LTR\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb99e88, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3292b75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bbc00e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.005] GetProcessHeap () returned 0x3150000 [0073.005] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.005] GetProcessHeap () returned 0x3150000 [0073.005] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0073.005] GetProcessHeap () returned 0x3150000 [0073.005] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0073.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc327f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb330b8a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bd6f0f8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0073.007] GetProcessHeap () returned 0x3150000 [0073.007] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc327f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb330ca4b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bcf7199, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0073.007] GetProcessHeap () returned 0x3150000 [0073.007] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.007] GetProcessHeap () returned 0x3150000 [0073.007] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Car\\RTL\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf7199, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb330d4eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bd1d3f2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0073.008] GetProcessHeap () returned 0x3150000 [0073.008] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.008] GetProcessHeap () returned 0x3150000 [0073.008] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0073.008] GetProcessHeap () returned 0x3150000 [0073.008] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.009] GetProcessHeap () returned 0x3150000 [0073.009] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd6f0f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb330e45c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8be0c854, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0073.009] GetProcessHeap () returned 0x3150000 [0073.009] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0073.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd6f0f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb335dfb4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8be0c854, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.011] GetProcessHeap () returned 0x3150000 [0073.011] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd6f0f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb335ec08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bd95377, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0073.011] GetProcessHeap () returned 0x3150000 [0073.012] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.012] GetProcessHeap () returned 0x3150000 [0073.012] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\LTR\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd95377, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb335eff0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bde65da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0073.012] GetProcessHeap () returned 0x3150000 [0073.012] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.012] GetProcessHeap () returned 0x3150000 [0073.012] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0073.012] GetProcessHeap () returned 0x3150000 [0073.012] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0073.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be0c854, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb33b18c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8beaa4cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0073.014] GetProcessHeap () returned 0x3150000 [0073.014] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be0c854, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb33b285d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8be5a264, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.014] GetProcessHeap () returned 0x3150000 [0073.014] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.014] GetProcessHeap () returned 0x3150000 [0073.014] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Home\\RTL\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8be5a264, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb33b30cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8be804ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0073.014] GetProcessHeap () returned 0x3150000 [0073.014] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.014] GetProcessHeap () returned 0x3150000 [0073.014] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0073.015] GetProcessHeap () returned 0x3150000 [0073.015] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.015] GetProcessHeap () returned 0x3150000 [0073.015] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8beaa4cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb33b37ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bf6b61f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0073.016] GetProcessHeap () returned 0x3150000 [0073.016] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0073.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8beaa4cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3404bd2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bf6b61f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.029] GetProcessHeap () returned 0x3150000 [0073.029] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8beaa4cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb34056ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bef69a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0073.029] GetProcessHeap () returned 0x3150000 [0073.029] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.029] GetProcessHeap () returned 0x3150000 [0073.029] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\LTR\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bef69a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3405f23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bf1cbfd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0073.030] GetProcessHeap () returned 0x3150000 [0073.030] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.030] GetProcessHeap () returned 0x3150000 [0073.030] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0073.030] GetProcessHeap () returned 0x3150000 [0073.030] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0073.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bf6b61f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3454610, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bfddd50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0073.031] GetProcessHeap () returned 0x3150000 [0073.031] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bf6b61f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3455631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bf9189e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.032] GetProcessHeap () returned 0x3150000 [0073.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.032] GetProcessHeap () returned 0x3150000 [0073.032] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Place\\RTL\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bfb7af7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3456035, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8bfddd50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0073.032] GetProcessHeap () returned 0x3150000 [0073.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.032] GetProcessHeap () returned 0x3150000 [0073.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0073.032] GetProcessHeap () returned 0x3150000 [0073.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.033] GetProcessHeap () returned 0x3150000 [0073.033] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c003fae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3456e12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0766c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.034] GetProcessHeap () returned 0x3150000 [0073.034] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0073.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c003fae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb34fccf8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0766c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0073.036] GetProcessHeap () returned 0x3150000 [0073.036] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.036] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c003fae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb34fe0e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c003fae, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.037] GetProcessHeap () returned 0x3150000 [0073.037] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.037] GetProcessHeap () returned 0x3150000 [0073.037] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\LTR\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c02a20c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb34fec79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c050465, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.037] GetProcessHeap () returned 0x3150000 [0073.037] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.037] GetProcessHeap () returned 0x3150000 [0073.037] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0073.037] GetProcessHeap () returned 0x3150000 [0073.037] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0073.037] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0766c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb350145a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0a185e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0073.038] GetProcessHeap () returned 0x3150000 [0073.038] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\contrast-black\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0766c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3501ce9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0766c3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0073.039] GetProcessHeap () returned 0x3150000 [0073.039] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.039] GetProcessHeap () returned 0x3150000 [0073.039] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0073.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Directions\\Work\\RTL\\contrast-white\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0766c3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb350228b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c0a185e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0073.039] GetProcessHeap () returned 0x3150000 [0073.039] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0073.039] GetProcessHeap () returned 0x3150000 [0073.039] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0073.040] GetProcessHeap () returned 0x3150000 [0073.040] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.041] GetProcessHeap () returned 0x3150000 [0073.041] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.041] GetProcessHeap () returned 0x3150000 [0073.041] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.041] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0a185e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb35c9bed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1ac8fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.233] GetProcessHeap () returned 0x3150000 [0073.234] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\contrast-black\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c0c7adc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb35cac6f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c13a1ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.234] GetProcessHeap () returned 0x3150000 [0073.234] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.234] GetProcessHeap () returned 0x3150000 [0073.234] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Home\\contrast-white\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c13a1ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb35cb8cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1866a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.235] GetProcessHeap () returned 0x3150000 [0073.235] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.235] GetProcessHeap () returned 0x3150000 [0073.235] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.235] GetProcessHeap () returned 0x3150000 [0073.235] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c1ac8fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3623b8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c26b4c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.238] GetProcessHeap () returned 0x3150000 [0073.238] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\contrast-black\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c1ac8fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb362499b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1f8db5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0073.238] GetProcessHeap () returned 0x3150000 [0073.238] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.238] GetProcessHeap () returned 0x3150000 [0073.238] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Place\\contrast-white\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c1f8db5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3625294, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c24526c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.239] GetProcessHeap () returned 0x3150000 [0073.239] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.239] GetProcessHeap () returned 0x3150000 [0073.239] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.239] GetProcessHeap () returned 0x3150000 [0073.239] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c26b4c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb367a3f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c2f19a3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0073.242] GetProcessHeap () returned 0x3150000 [0073.242] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\contrast-black\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c26b4c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb367b39d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c29171e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0073.243] GetProcessHeap () returned 0x3150000 [0073.243] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.243] GetProcessHeap () returned 0x3150000 [0073.243] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\TrafficHub\\contrast-white\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c29171e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb367bae1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c2b797c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.243] GetProcessHeap () returned 0x3150000 [0073.243] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.243] GetProcessHeap () returned 0x3150000 [0073.243] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.244] GetProcessHeap () returned 0x3150000 [0073.244] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c2f19a3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36c962c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c3640d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.246] GetProcessHeap () returned 0x3150000 [0073.246] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\contrast-black\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c2f19a3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36ca3a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c317c21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.247] GetProcessHeap () returned 0x3150000 [0073.247] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.247] GetProcessHeap () returned 0x3150000 [0073.247] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\SecondaryTiles\\Work\\contrast-white\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c317c21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36caca0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c317c21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.247] GetProcessHeap () returned 0x3150000 [0073.247] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.247] GetProcessHeap () returned 0x3150000 [0073.247] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.247] GetProcessHeap () returned 0x3150000 [0073.247] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.248] GetProcessHeap () returned 0x3150000 [0073.248] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c38a336, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36cb89c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c38a336, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0073.249] GetProcessHeap () returned 0x3150000 [0073.249] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.249] GetProcessHeap () returned 0x3150000 [0073.249] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c38a336, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36cc1d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c57a1d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.250] GetProcessHeap () returned 0x3150000 [0073.250] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\beeps\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c38a336, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36ccb49, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c3fca47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.251] GetProcessHeap () returned 0x3150000 [0073.251] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\beeps\\beeps\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c38a336, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36cd6ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c38a336, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0073.251] GetProcessHeap () returned 0x3150000 [0073.251] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.251] GetProcessHeap () returned 0x3150000 [0073.251] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.251] GetProcessHeap () returned 0x3150000 [0073.251] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-GB\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c422ca0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb36ce29e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c422ca0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.252] GetProcessHeap () returned 0x3150000 [0073.252] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-GB\\en-GB_female_TTS\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c422ca0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb37661f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c4bb60f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0073.254] GetProcessHeap () returned 0x3150000 [0073.254] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.255] GetProcessHeap () returned 0x3150000 [0073.255] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.255] GetProcessHeap () returned 0x3150000 [0073.255] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-IN\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c4bb60f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3766d81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c4bb60f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0073.257] GetProcessHeap () returned 0x3150000 [0073.257] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-IN\\en-IN_female_TTS\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c4bb60f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb37c2829, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c553f78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0073.259] GetProcessHeap () returned 0x3150000 [0073.259] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.259] GetProcessHeap () returned 0x3150000 [0073.259] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.260] GetProcessHeap () returned 0x3150000 [0073.260] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-US\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c57a1d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb37c3803, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c57a1d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.261] GetProcessHeap () returned 0x3150000 [0073.261] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets\\Voices\\en-US\\en-US_female_TTS\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8c57a1d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381afc6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c5c668d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0073.263] GetProcessHeap () returned 0x3150000 [0073.263] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.263] GetProcessHeap () returned 0x3150000 [0073.263] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.263] GetProcessHeap () returned 0x3150000 [0073.263] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.264] GetProcessHeap () returned 0x3150000 [0073.264] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0073.265] GetProcessHeap () returned 0x3150000 [0073.265] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0073.265] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Microsoft.Bing.Client.Graph\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cd4055a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381c4eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cd4055a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0073.265] GetProcessHeap () returned 0x3150000 [0073.265] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0073.266] GetProcessHeap () returned 0x3150000 [0073.266] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0073.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd4ea481, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd1c01b1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd1c01b1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.266] GetProcessHeap () returned 0x3150000 [0073.266] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0073.266] GetProcessHeap () returned 0x3150000 [0073.266] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0073.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Speech\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cdb2c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381d673, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cdd8ec4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.266] GetProcessHeap () returned 0x3150000 [0073.266] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Speech\\en-GB\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cdb2c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381e43a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cdb2c6b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0073.267] GetProcessHeap () returned 0x3150000 [0073.267] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.267] GetProcessHeap () returned 0x3150000 [0073.267] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.267] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Speech\\en-US\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cdd8ec4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381eaf6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cdd8ec4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.268] GetProcessHeap () returned 0x3150000 [0073.268] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.268] GetProcessHeap () returned 0x3150000 [0073.268] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0073.268] GetProcessHeap () returned 0x3150000 [0073.268] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0073.338] GetProcessHeap () returned 0x3150000 [0073.338] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0073.339] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391b556, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0073.340] GetProcessHeap () returned 0x3150000 [0073.340] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0073.340] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391ec44, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1384417, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.341] GetProcessHeap () returned 0x3150000 [0073.341] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0073.341] GetProcessHeap () returned 0x3150000 [0073.341] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0073.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a006ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1501b56, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.349] GetProcessHeap () returned 0x3150000 [0073.349] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0073.349] GetProcessHeap () returned 0x3150000 [0073.349] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0073.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Common\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1501b56, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a0227c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1501b56, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0073.351] GetProcessHeap () returned 0x3150000 [0073.351] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Common\\NavigationData\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1501b56, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a02903, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1501b56, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.351] GetProcessHeap () returned 0x3150000 [0073.351] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.351] GetProcessHeap () returned 0x3150000 [0073.351] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0073.351] GetProcessHeap () returned 0x3150000 [0073.351] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0073.351] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\CompanionAppCore\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd15e6aaa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a03176, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd15e6aaa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0073.352] GetProcessHeap () returned 0x3150000 [0073.352] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\CompanionAppCore\\Data\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd15e6aaa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a03a8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd15e6aaa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0073.352] GetProcessHeap () returned 0x3150000 [0073.352] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.352] GetProcessHeap () returned 0x3150000 [0073.352] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0073.353] GetProcessHeap () returned 0x3150000 [0073.353] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0073.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acabea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0073.355] GetProcessHeap () returned 0x3150000 [0073.355] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\af-ZA\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acc02c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd160cc79, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0073.356] GetProcessHeap () returned 0x3150000 [0073.356] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\af-ZA\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acce34, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd160cc79, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0073.356] GetProcessHeap () returned 0x3150000 [0073.356] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.357] GetProcessHeap () returned 0x3150000 [0073.357] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\af-ZA\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acd31e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd160cc79, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.357] GetProcessHeap () returned 0x3150000 [0073.357] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.357] GetProcessHeap () returned 0x3150000 [0073.357] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.358] GetProcessHeap () returned 0x3150000 [0073.358] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acd818, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.359] GetProcessHeap () returned 0x3150000 [0073.359] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acded2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0073.359] GetProcessHeap () returned 0x3150000 [0073.359] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.359] GetProcessHeap () returned 0x3150000 [0073.359] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3ace3d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.360] GetProcessHeap () returned 0x3150000 [0073.360] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3ace965, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.360] GetProcessHeap () returned 0x3150000 [0073.360] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.360] GetProcessHeap () returned 0x3150000 [0073.360] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.360] GetProcessHeap () returned 0x3150000 [0073.361] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\am-ET\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acf05e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.362] GetProcessHeap () returned 0x3150000 [0073.362] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.367] GetProcessHeap () returned 0x3150000 [0073.367] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.368] GetProcessHeap () returned 0x3150000 [0073.368] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ar-sa\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acf640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0073.369] GetProcessHeap () returned 0x3150000 [0073.369] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.369] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ar-sa\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1632e44, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acfd4c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1632e44, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0073.369] GetProcessHeap () returned 0x3150000 [0073.369] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.369] GetProcessHeap () returned 0x3150000 [0073.369] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.370] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ar-sa\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3ad02d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.370] GetProcessHeap () returned 0x3150000 [0073.370] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.370] GetProcessHeap () returned 0x3150000 [0073.370] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.371] GetProcessHeap () returned 0x3150000 [0073.371] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\az-latn-az\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b61797, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0073.372] GetProcessHeap () returned 0x3150000 [0073.372] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\az-latn-az\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b628a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0073.372] GetProcessHeap () returned 0x3150000 [0073.372] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.372] GetProcessHeap () returned 0x3150000 [0073.372] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\az-latn-az\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b62f31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0073.373] GetProcessHeap () returned 0x3150000 [0073.373] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.373] GetProcessHeap () returned 0x3150000 [0073.373] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.374] GetProcessHeap () returned 0x3150000 [0073.374] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\be-by\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b63663, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0073.374] GetProcessHeap () returned 0x3150000 [0073.374] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\be-by\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd165909e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b63d32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd165909e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0073.375] GetProcessHeap () returned 0x3150000 [0073.375] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.375] GetProcessHeap () returned 0x3150000 [0073.375] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\be-by\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b64526, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0073.376] GetProcessHeap () returned 0x3150000 [0073.376] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.376] GetProcessHeap () returned 0x3150000 [0073.376] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.376] GetProcessHeap () returned 0x3150000 [0073.376] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bg-BG\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b64c64, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0073.377] GetProcessHeap () returned 0x3150000 [0073.377] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bg-BG\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b654be, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0073.378] GetProcessHeap () returned 0x3150000 [0073.378] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.378] GetProcessHeap () returned 0x3150000 [0073.378] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bg-BG\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b65cf3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.378] GetProcessHeap () returned 0x3150000 [0073.379] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.379] GetProcessHeap () returned 0x3150000 [0073.379] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.379] GetProcessHeap () returned 0x3150000 [0073.379] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b66403, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0073.380] GetProcessHeap () returned 0x3150000 [0073.380] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.380] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd167f3a4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b66cd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd167f3a4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0073.381] GetProcessHeap () returned 0x3150000 [0073.381] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.381] GetProcessHeap () returned 0x3150000 [0073.381] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6731c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0073.381] GetProcessHeap () returned 0x3150000 [0073.381] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.381] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b67c32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0073.507] GetProcessHeap () returned 0x3150000 [0073.507] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.507] GetProcessHeap () returned 0x3150000 [0073.507] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.507] GetProcessHeap () returned 0x3150000 [0073.507] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\bn-BD\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b681e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.508] GetProcessHeap () returned 0x3150000 [0073.508] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.508] GetProcessHeap () returned 0x3150000 [0073.508] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.509] GetProcessHeap () returned 0x3150000 [0073.509] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.509] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ca-es\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b68832, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0073.509] GetProcessHeap () returned 0x3150000 [0073.509] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ca-es\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b69102, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0073.510] GetProcessHeap () returned 0x3150000 [0073.510] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.510] GetProcessHeap () returned 0x3150000 [0073.510] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.510] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ca-es\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6990e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16a561b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0073.511] GetProcessHeap () returned 0x3150000 [0073.511] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.511] GetProcessHeap () returned 0x3150000 [0073.511] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.512] GetProcessHeap () returned 0x3150000 [0073.512] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.512] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\cs-cz\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6a067, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0073.513] GetProcessHeap () returned 0x3150000 [0073.513] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\cs-cz\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16a561b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6a7df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0073.513] GetProcessHeap () returned 0x3150000 [0073.513] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.513] GetProcessHeap () returned 0x3150000 [0073.513] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.513] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\cs-cz\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6ad9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0073.514] GetProcessHeap () returned 0x3150000 [0073.514] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.514] GetProcessHeap () returned 0x3150000 [0073.514] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.515] GetProcessHeap () returned 0x3150000 [0073.515] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.515] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\da-dk\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6b4e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.516] GetProcessHeap () returned 0x3150000 [0073.516] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\da-dk\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6bbf7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0073.516] GetProcessHeap () returned 0x3150000 [0073.516] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.516] GetProcessHeap () returned 0x3150000 [0073.516] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.516] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\da-dk\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6c350, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16cb7a8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0073.517] GetProcessHeap () returned 0x3150000 [0073.517] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.517] GetProcessHeap () returned 0x3150000 [0073.517] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.517] GetProcessHeap () returned 0x3150000 [0073.517] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.518] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\de-de\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6cb42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0073.518] GetProcessHeap () returned 0x3150000 [0073.518] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\de-de\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16cb7a8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6d3c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0073.519] GetProcessHeap () returned 0x3150000 [0073.519] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.519] GetProcessHeap () returned 0x3150000 [0073.519] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.519] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\de-de\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6da8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0073.520] GetProcessHeap () returned 0x3150000 [0073.520] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.520] GetProcessHeap () returned 0x3150000 [0073.520] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.520] GetProcessHeap () returned 0x3150000 [0073.520] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\el-GR\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6e28a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0073.521] GetProcessHeap () returned 0x3150000 [0073.521] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\el-GR\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6eb1c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.522] GetProcessHeap () returned 0x3150000 [0073.522] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.522] GetProcessHeap () returned 0x3150000 [0073.522] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\el-GR\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6f1bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0073.522] GetProcessHeap () returned 0x3150000 [0073.522] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.523] GetProcessHeap () returned 0x3150000 [0073.523] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.523] GetProcessHeap () returned 0x3150000 [0073.523] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-gb\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b6fa3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0073.524] GetProcessHeap () returned 0x3150000 [0073.524] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.524] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-gb\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16f1ad8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b703f4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd16f1ad8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0073.525] GetProcessHeap () returned 0x3150000 [0073.525] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.525] GetProcessHeap () returned 0x3150000 [0073.525] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.525] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-gb\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b70aaf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0073.525] GetProcessHeap () returned 0x3150000 [0073.525] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.525] GetProcessHeap () returned 0x3150000 [0073.525] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.526] GetProcessHeap () returned 0x3150000 [0073.526] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.526] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-US\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b711cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0073.527] GetProcessHeap () returned 0x3150000 [0073.527] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.527] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-US\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b71a29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0073.527] GetProcessHeap () returned 0x3150000 [0073.527] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.528] GetProcessHeap () returned 0x3150000 [0073.528] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.528] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\en-US\\windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b71f78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.528] GetProcessHeap () returned 0x3150000 [0073.528] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.528] GetProcessHeap () returned 0x3150000 [0073.528] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.529] GetProcessHeap () returned 0x3150000 [0073.529] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.529] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-es\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b727df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0073.529] GetProcessHeap () returned 0x3150000 [0073.529] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-es\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1717d00, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b72faa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1717d00, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.530] GetProcessHeap () returned 0x3150000 [0073.530] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.530] GetProcessHeap () returned 0x3150000 [0073.530] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-es\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b73624, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0073.531] GetProcessHeap () returned 0x3150000 [0073.531] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.531] GetProcessHeap () returned 0x3150000 [0073.531] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.532] GetProcessHeap () returned 0x3150000 [0073.532] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-mx\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b73d44, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.532] GetProcessHeap () returned 0x3150000 [0073.532] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-mx\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b74495, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0073.533] GetProcessHeap () returned 0x3150000 [0073.533] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.533] GetProcessHeap () returned 0x3150000 [0073.533] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\es-mx\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b749df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0073.534] GetProcessHeap () returned 0x3150000 [0073.534] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.534] GetProcessHeap () returned 0x3150000 [0073.534] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.535] GetProcessHeap () returned 0x3150000 [0073.535] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.535] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\et-ee\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b7522b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0073.536] GetProcessHeap () returned 0x3150000 [0073.536] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.536] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\et-ee\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd173df84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b75a56, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd173df84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0073.536] GetProcessHeap () returned 0x3150000 [0073.536] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.537] GetProcessHeap () returned 0x3150000 [0073.537] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\et-ee\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b75f90, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.537] GetProcessHeap () returned 0x3150000 [0073.537] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.537] GetProcessHeap () returned 0x3150000 [0073.537] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.538] GetProcessHeap () returned 0x3150000 [0073.538] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\eu-es\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b765cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0073.539] GetProcessHeap () returned 0x3150000 [0073.539] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\eu-es\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b76c22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0073.539] GetProcessHeap () returned 0x3150000 [0073.540] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.540] GetProcessHeap () returned 0x3150000 [0073.540] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\eu-es\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b77226, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0073.540] GetProcessHeap () returned 0x3150000 [0073.540] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.540] GetProcessHeap () returned 0x3150000 [0073.540] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.541] GetProcessHeap () returned 0x3150000 [0073.541] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fa-IR\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3b77b4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0073.541] GetProcessHeap () returned 0x3150000 [0073.541] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fa-IR\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc632d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1764198, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0073.844] GetProcessHeap () returned 0x3150000 [0073.844] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.844] GetProcessHeap () returned 0x3150000 [0073.844] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.844] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fa-IR\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1764198, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc6cda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0073.844] GetProcessHeap () returned 0x3150000 [0073.844] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.844] GetProcessHeap () returned 0x3150000 [0073.844] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.845] GetProcessHeap () returned 0x3150000 [0073.845] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.845] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fi-fi\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc768e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.846] GetProcessHeap () returned 0x3150000 [0073.846] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.846] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fi-fi\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc8033, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0073.846] GetProcessHeap () returned 0x3150000 [0073.846] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.846] GetProcessHeap () returned 0x3150000 [0073.847] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.847] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fi-fi\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc8d4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0073.848] GetProcessHeap () returned 0x3150000 [0073.848] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.848] GetProcessHeap () returned 0x3150000 [0073.848] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.849] GetProcessHeap () returned 0x3150000 [0073.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.849] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fil-PH\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bc981d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0073.849] GetProcessHeap () returned 0x3150000 [0073.849] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fil-PH\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bca430, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.850] GetProcessHeap () returned 0x3150000 [0073.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.850] GetProcessHeap () returned 0x3150000 [0073.850] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.850] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fil-PH\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd178a438, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcb11e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd178a438, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0073.850] GetProcessHeap () returned 0x3150000 [0073.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.850] GetProcessHeap () returned 0x3150000 [0073.850] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.851] GetProcessHeap () returned 0x3150000 [0073.851] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.852] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-ca\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcb5a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.852] GetProcessHeap () returned 0x3150000 [0073.852] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-ca\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcbb7a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.853] GetProcessHeap () returned 0x3150000 [0073.853] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.853] GetProcessHeap () returned 0x3150000 [0073.853] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.853] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-ca\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcc04f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0073.853] GetProcessHeap () returned 0x3150000 [0073.853] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.853] GetProcessHeap () returned 0x3150000 [0073.853] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.854] GetProcessHeap () returned 0x3150000 [0073.854] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-fr\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcc44b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0073.855] GetProcessHeap () returned 0x3150000 [0073.855] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.855] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-fr\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcc9ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.856] GetProcessHeap () returned 0x3150000 [0073.856] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.856] GetProcessHeap () returned 0x3150000 [0073.856] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.856] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\fr-fr\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcce17, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17b0696, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0073.856] GetProcessHeap () returned 0x3150000 [0073.856] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.856] GetProcessHeap () returned 0x3150000 [0073.856] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.857] GetProcessHeap () returned 0x3150000 [0073.857] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\gl-es\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcd223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0073.858] GetProcessHeap () returned 0x3150000 [0073.858] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.858] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\gl-es\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17b0696, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcd7e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.858] GetProcessHeap () returned 0x3150000 [0073.859] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.859] GetProcessHeap () returned 0x3150000 [0073.859] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.859] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\gl-es\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcdd23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0073.859] GetProcessHeap () returned 0x3150000 [0073.859] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.859] GetProcessHeap () returned 0x3150000 [0073.859] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.860] GetProcessHeap () returned 0x3150000 [0073.860] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ha-Latn-NG\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bce143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.861] GetProcessHeap () returned 0x3150000 [0073.861] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.861] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ha-Latn-NG\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bce7d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.861] GetProcessHeap () returned 0x3150000 [0073.861] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.862] GetProcessHeap () returned 0x3150000 [0073.862] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ha-Latn-NG\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcec49, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17d68f4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.862] GetProcessHeap () returned 0x3150000 [0073.862] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.862] GetProcessHeap () returned 0x3150000 [0073.862] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.863] GetProcessHeap () returned 0x3150000 [0073.863] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\he-IL\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcf06e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0073.864] GetProcessHeap () returned 0x3150000 [0073.864] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.864] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\he-IL\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17d68f4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcf5c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0073.865] GetProcessHeap () returned 0x3150000 [0073.865] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.865] GetProcessHeap () returned 0x3150000 [0073.865] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\he-IL\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcf98d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0073.865] GetProcessHeap () returned 0x3150000 [0073.865] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.865] GetProcessHeap () returned 0x3150000 [0073.865] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.866] GetProcessHeap () returned 0x3150000 [0073.866] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.866] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bcfd54, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.866] GetProcessHeap () returned 0x3150000 [0073.866] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd0298, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.867] GetProcessHeap () returned 0x3150000 [0073.868] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.868] GetProcessHeap () returned 0x3150000 [0073.868] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd0653, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0073.868] GetProcessHeap () returned 0x3150000 [0073.868] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0073.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd0b90, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.868] GetProcessHeap () returned 0x3150000 [0073.868] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0073.868] GetProcessHeap () returned 0x3150000 [0073.868] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.869] GetProcessHeap () returned 0x3150000 [0073.869] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hi-in\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd1000, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd17fcb09, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0073.869] GetProcessHeap () returned 0x3150000 [0073.869] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.869] GetProcessHeap () returned 0x3150000 [0073.869] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.870] GetProcessHeap () returned 0x3150000 [0073.870] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.871] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hr-HR\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd1485, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0073.871] GetProcessHeap () returned 0x3150000 [0073.871] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hr-HR\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fcb09, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd195d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0073.872] GetProcessHeap () returned 0x3150000 [0073.872] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.872] GetProcessHeap () returned 0x3150000 [0073.872] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.872] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hr-HR\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd1d15, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.872] GetProcessHeap () returned 0x3150000 [0073.873] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.873] GetProcessHeap () returned 0x3150000 [0073.873] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.873] GetProcessHeap () returned 0x3150000 [0073.873] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hu-HU\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd21c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0073.874] GetProcessHeap () returned 0x3150000 [0073.874] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.874] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hu-HU\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd271d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0073.875] GetProcessHeap () returned 0x3150000 [0073.875] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.875] GetProcessHeap () returned 0x3150000 [0073.875] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\hu-HU\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd2b5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1822dad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.875] GetProcessHeap () returned 0x3150000 [0073.876] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.876] GetProcessHeap () returned 0x3150000 [0073.876] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.876] GetProcessHeap () returned 0x3150000 [0073.876] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\id-ID\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd2fa8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0073.877] GetProcessHeap () returned 0x3150000 [0073.877] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\id-ID\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1822dad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd34f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0073.878] GetProcessHeap () returned 0x3150000 [0073.993] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.993] GetProcessHeap () returned 0x3150000 [0073.993] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\id-ID\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd38c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0073.994] GetProcessHeap () returned 0x3150000 [0073.994] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.994] GetProcessHeap () returned 0x3150000 [0073.994] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.995] GetProcessHeap () returned 0x3150000 [0073.995] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\is-is\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd3d56, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0073.996] GetProcessHeap () returned 0x3150000 [0073.996] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\is-is\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd42ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0073.997] GetProcessHeap () returned 0x3150000 [0073.997] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.997] GetProcessHeap () returned 0x3150000 [0073.997] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\is-is\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd46d4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1848fd2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0073.997] GetProcessHeap () returned 0x3150000 [0073.997] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0073.997] GetProcessHeap () returned 0x3150000 [0073.997] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0073.998] GetProcessHeap () returned 0x3150000 [0073.998] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0073.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\it-it\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd4a8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0073.999] GetProcessHeap () returned 0x3150000 [0073.999] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0073.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\it-it\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1848fd2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd4fe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.000] GetProcessHeap () returned 0x3150000 [0074.000] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.000] GetProcessHeap () returned 0x3150000 [0074.000] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.000] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\it-it\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd53d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.000] GetProcessHeap () returned 0x3150000 [0074.000] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.000] GetProcessHeap () returned 0x3150000 [0074.000] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.001] GetProcessHeap () returned 0x3150000 [0074.001] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd57a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.001] GetProcessHeap () returned 0x3150000 [0074.001] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd5d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0074.003] GetProcessHeap () returned 0x3150000 [0074.003] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.003] GetProcessHeap () returned 0x3150000 [0074.003] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd6141, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.003] GetProcessHeap () returned 0x3150000 [0074.003] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0074.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd6651, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0074.003] GetProcessHeap () returned 0x3150000 [0074.004] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0074.004] GetProcessHeap () returned 0x3150000 [0074.004] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.004] GetProcessHeap () returned 0x3150000 [0074.004] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ja-jp\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd6abe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd186f25d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0074.004] GetProcessHeap () returned 0x3150000 [0074.004] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.010] GetProcessHeap () returned 0x3150000 [0074.010] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.011] GetProcessHeap () returned 0x3150000 [0074.011] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kk-kz\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd6f76, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.012] GetProcessHeap () returned 0x3150000 [0074.012] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kk-kz\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd186f25d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd7454, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0074.013] GetProcessHeap () returned 0x3150000 [0074.013] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.013] GetProcessHeap () returned 0x3150000 [0074.013] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kk-kz\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd78b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0074.013] GetProcessHeap () returned 0x3150000 [0074.013] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.013] GetProcessHeap () returned 0x3150000 [0074.013] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.013] GetProcessHeap () returned 0x3150000 [0074.013] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd7d0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.013] GetProcessHeap () returned 0x3150000 [0074.013] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd8256, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.014] GetProcessHeap () returned 0x3150000 [0074.014] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.014] GetProcessHeap () returned 0x3150000 [0074.014] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd8622, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0074.014] GetProcessHeap () returned 0x3150000 [0074.014] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0074.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd8b2b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0074.015] GetProcessHeap () returned 0x3150000 [0074.015] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0074.015] GetProcessHeap () returned 0x3150000 [0074.015] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.015] GetProcessHeap () returned 0x3150000 [0074.015] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\km-KH\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd903b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18954bb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.016] GetProcessHeap () returned 0x3150000 [0074.016] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.016] GetProcessHeap () returned 0x3150000 [0074.016] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.017] GetProcessHeap () returned 0x3150000 [0074.017] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd94c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0074.018] GetProcessHeap () returned 0x3150000 [0074.018] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18954bb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd99f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.019] GetProcessHeap () returned 0x3150000 [0074.019] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.019] GetProcessHeap () returned 0x3150000 [0074.019] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bd9dad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0074.019] GetProcessHeap () returned 0x3150000 [0074.019] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0074.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bda31e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.019] GetProcessHeap () returned 0x3150000 [0074.019] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0074.019] GetProcessHeap () returned 0x3150000 [0074.019] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.019] GetProcessHeap () returned 0x3150000 [0074.019] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\kn-in\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bda7e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0074.020] GetProcessHeap () returned 0x3150000 [0074.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.020] GetProcessHeap () returned 0x3150000 [0074.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.021] GetProcessHeap () returned 0x3150000 [0074.021] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdac7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.021] GetProcessHeap () returned 0x3150000 [0074.021] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdb185, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0074.022] GetProcessHeap () returned 0x3150000 [0074.022] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.022] GetProcessHeap () returned 0x3150000 [0074.022] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdb54a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.022] GetProcessHeap () returned 0x3150000 [0074.022] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0074.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18bb71d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdbc73, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18bb71d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0074.023] GetProcessHeap () returned 0x3150000 [0074.023] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0074.023] GetProcessHeap () returned 0x3150000 [0074.023] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.024] GetProcessHeap () returned 0x3150000 [0074.024] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ko-kr\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdc134, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0074.024] GetProcessHeap () returned 0x3150000 [0074.024] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.024] GetProcessHeap () returned 0x3150000 [0074.024] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.025] GetProcessHeap () returned 0x3150000 [0074.025] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lo-LA\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdc5e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0074.026] GetProcessHeap () returned 0x3150000 [0074.026] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lo-LA\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdcb3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.026] GetProcessHeap () returned 0x3150000 [0074.026] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.027] GetProcessHeap () returned 0x3150000 [0074.027] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lo-LA\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdcef0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.027] GetProcessHeap () returned 0x3150000 [0074.027] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0074.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lo-LA\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdd45d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0074.028] GetProcessHeap () returned 0x3150000 [0074.028] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0074.028] GetProcessHeap () returned 0x3150000 [0074.028] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.028] GetProcessHeap () returned 0x3150000 [0074.028] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lo-LA\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdd8cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0074.029] GetProcessHeap () returned 0x3150000 [0074.029] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.029] GetProcessHeap () returned 0x3150000 [0074.029] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.030] GetProcessHeap () returned 0x3150000 [0074.030] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lt-lt\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bddd32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1907ba9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0074.031] GetProcessHeap () returned 0x3150000 [0074.031] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lt-lt\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd18e1926, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bde27b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd18e1926, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.032] GetProcessHeap () returned 0x3150000 [0074.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.032] GetProcessHeap () returned 0x3150000 [0074.032] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lt-lt\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1907ba9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bde603, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1907ba9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0074.032] GetProcessHeap () returned 0x3150000 [0074.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.032] GetProcessHeap () returned 0x3150000 [0074.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.033] GetProcessHeap () returned 0x3150000 [0074.033] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.033] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lv-lv\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1907ba9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdea7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1907ba9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.034] GetProcessHeap () returned 0x3150000 [0074.034] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lv-lv\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1907ba9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdefdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1907ba9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0074.091] GetProcessHeap () returned 0x3150000 [0074.091] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.091] GetProcessHeap () returned 0x3150000 [0074.091] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\lv-lv\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1907ba9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdf3bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1907ba9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0074.091] GetProcessHeap () returned 0x3150000 [0074.091] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.092] GetProcessHeap () returned 0x3150000 [0074.092] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.092] GetProcessHeap () returned 0x3150000 [0074.092] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.093] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\mk-MK\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1907ba9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdf85e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0074.093] GetProcessHeap () returned 0x3150000 [0074.093] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\mk-MK\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1907ba9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bdfd9b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1907ba9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.094] GetProcessHeap () returned 0x3150000 [0074.094] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.094] GetProcessHeap () returned 0x3150000 [0074.094] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.094] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\mk-MK\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be0128, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0074.094] GetProcessHeap () returned 0x3150000 [0074.094] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.094] GetProcessHeap () returned 0x3150000 [0074.094] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.095] GetProcessHeap () returned 0x3150000 [0074.095] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ml-in\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be05b2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0074.096] GetProcessHeap () returned 0x3150000 [0074.096] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ml-in\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be0af1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0074.097] GetProcessHeap () returned 0x3150000 [0074.097] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.097] GetProcessHeap () returned 0x3150000 [0074.097] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ml-in\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be0e95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0074.097] GetProcessHeap () returned 0x3150000 [0074.097] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0074.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ml-in\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be13d8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0074.098] GetProcessHeap () returned 0x3150000 [0074.098] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0074.098] GetProcessHeap () returned 0x3150000 [0074.098] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.098] GetProcessHeap () returned 0x3150000 [0074.098] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ml-in\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be1841, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0074.098] GetProcessHeap () returned 0x3150000 [0074.098] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.099] GetProcessHeap () returned 0x3150000 [0074.099] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.099] GetProcessHeap () returned 0x3150000 [0074.099] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ms-MY\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be1c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1954034, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.100] GetProcessHeap () returned 0x3150000 [0074.100] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ms-MY\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd192ddda, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be216c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd192ddda, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0074.101] GetProcessHeap () returned 0x3150000 [0074.101] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.101] GetProcessHeap () returned 0x3150000 [0074.101] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ms-MY\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1954034, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be2580, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1954034, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0074.101] GetProcessHeap () returned 0x3150000 [0074.101] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.101] GetProcessHeap () returned 0x3150000 [0074.101] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.101] GetProcessHeap () returned 0x3150000 [0074.101] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.101] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\nb-no\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1954034, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be2939, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1954034, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0074.105] GetProcessHeap () returned 0x3150000 [0074.105] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\nb-no\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1954034, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be2e78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1954034, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0074.106] GetProcessHeap () returned 0x3150000 [0074.106] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.106] GetProcessHeap () returned 0x3150000 [0074.106] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\nb-no\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1954034, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be323a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1954034, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0074.106] GetProcessHeap () returned 0x3150000 [0074.106] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.106] GetProcessHeap () returned 0x3150000 [0074.106] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.106] GetProcessHeap () returned 0x3150000 [0074.106] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\nl-nl\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1954034, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be36b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0074.107] GetProcessHeap () returned 0x3150000 [0074.107] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\nl-nl\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1954034, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be3bfc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1954034, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0074.107] GetProcessHeap () returned 0x3150000 [0074.107] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.107] GetProcessHeap () returned 0x3150000 [0074.107] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\nl-nl\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be4019, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0074.108] GetProcessHeap () returned 0x3150000 [0074.108] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.108] GetProcessHeap () returned 0x3150000 [0074.108] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.108] GetProcessHeap () returned 0x3150000 [0074.108] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.108] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pl-pl\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be442f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.108] GetProcessHeap () returned 0x3150000 [0074.108] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.108] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pl-pl\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be4973, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0074.108] GetProcessHeap () returned 0x3150000 [0074.108] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.108] GetProcessHeap () returned 0x3150000 [0074.108] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.108] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pl-pl\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be4cf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0074.109] GetProcessHeap () returned 0x3150000 [0074.109] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.109] GetProcessHeap () returned 0x3150000 [0074.109] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.109] GetProcessHeap () returned 0x3150000 [0074.109] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pt-br\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be51bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.109] GetProcessHeap () returned 0x3150000 [0074.109] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pt-br\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be5729, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd197a2a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.110] GetProcessHeap () returned 0x3150000 [0074.110] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.110] GetProcessHeap () returned 0x3150000 [0074.110] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pt-br\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd197a2a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be5b21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19a053a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0074.110] GetProcessHeap () returned 0x3150000 [0074.110] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.110] GetProcessHeap () returned 0x3150000 [0074.110] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.110] GetProcessHeap () returned 0x3150000 [0074.110] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pt-pt\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19a053a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be607f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19a053a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0074.111] GetProcessHeap () returned 0x3150000 [0074.111] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pt-pt\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19a053a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be65bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19a053a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0074.118] GetProcessHeap () returned 0x3150000 [0074.118] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.118] GetProcessHeap () returned 0x3150000 [0074.118] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\pt-pt\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19a053a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be68d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19a053a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0074.118] GetProcessHeap () returned 0x3150000 [0074.118] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.118] GetProcessHeap () returned 0x3150000 [0074.118] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.118] GetProcessHeap () returned 0x3150000 [0074.118] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\resources\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19a053a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be6d4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19c675b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.118] GetProcessHeap () returned 0x3150000 [0074.118] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\resources\\css\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19a053a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be734a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19a053a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0074.119] GetProcessHeap () returned 0x3150000 [0074.119] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.119] GetProcessHeap () returned 0x3150000 [0074.119] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.119] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\resources\\images\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19a053a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be7666, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19a053a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0074.119] GetProcessHeap () returned 0x3150000 [0074.119] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.120] GetProcessHeap () returned 0x3150000 [0074.120] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\resources\\scripts\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19c675b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be7a22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19c675b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0074.120] GetProcessHeap () returned 0x3150000 [0074.120] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.120] GetProcessHeap () returned 0x3150000 [0074.120] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.121] GetProcessHeap () returned 0x3150000 [0074.121] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ro-RO\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19c675b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be7f96, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19c675b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0074.121] GetProcessHeap () returned 0x3150000 [0074.121] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ro-RO\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19c675b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be84b2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19c675b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0074.122] GetProcessHeap () returned 0x3150000 [0074.122] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.123] GetProcessHeap () returned 0x3150000 [0074.123] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ro-RO\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19c675b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be8871, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19c675b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.123] GetProcessHeap () returned 0x3150000 [0074.123] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.123] GetProcessHeap () returned 0x3150000 [0074.123] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.124] GetProcessHeap () returned 0x3150000 [0074.124] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ru-ru\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19c675b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be8d58, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0074.124] GetProcessHeap () returned 0x3150000 [0074.124] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ru-ru\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19c675b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be928f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.125] GetProcessHeap () returned 0x3150000 [0074.125] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.125] GetProcessHeap () returned 0x3150000 [0074.125] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ru-ru\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19ec9c9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be9656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0074.126] GetProcessHeap () returned 0x3150000 [0074.126] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.126] GetProcessHeap () returned 0x3150000 [0074.126] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.127] GetProcessHeap () returned 0x3150000 [0074.127] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sk-SK\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19ec9c9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be9add, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0074.127] GetProcessHeap () returned 0x3150000 [0074.127] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sk-SK\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19ec9c9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3be9f4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0074.128] GetProcessHeap () returned 0x3150000 [0074.128] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.128] GetProcessHeap () returned 0x3150000 [0074.128] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sk-SK\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19ec9c9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bea3a8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0074.128] GetProcessHeap () returned 0x3150000 [0074.128] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.128] GetProcessHeap () returned 0x3150000 [0074.128] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.129] GetProcessHeap () returned 0x3150000 [0074.129] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.130] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sl-SI\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19ec9c9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bea832, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.130] GetProcessHeap () returned 0x3150000 [0074.130] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sl-SI\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd19ec9c9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bead14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd19ec9c9, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0074.131] GetProcessHeap () returned 0x3150000 [0074.131] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.131] GetProcessHeap () returned 0x3150000 [0074.131] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sl-SI\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beb0ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0074.131] GetProcessHeap () returned 0x3150000 [0074.131] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.131] GetProcessHeap () returned 0x3150000 [0074.131] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.132] GetProcessHeap () returned 0x3150000 [0074.132] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sq-AL\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beb509, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.133] GetProcessHeap () returned 0x3150000 [0074.133] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sq-AL\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beba5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.201] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beba5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.201] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.201] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.201] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x159a, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.201] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.201] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.201] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0074.201] GetProcessHeap () returned 0x3150000 [0074.201] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.201] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1515, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.201] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.201] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bebe70, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0074.202] GetProcessHeap () returned 0x3150000 [0074.202] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sq-AL\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bebe70, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0074.216] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bebe70, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.216] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.216] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x527, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.216] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x527, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.216] FindClose (in: hFindFile=0x57d22b8 | out: hFindFile=0x57d22b8) returned 1 [0074.216] GetProcessHeap () returned 0x3150000 [0074.216] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.216] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bebe70, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0074.216] FindClose (in: hFindFile=0x57d20f8 | out: hFindFile=0x57d20f8) returned 1 [0074.216] GetProcessHeap () returned 0x3150000 [0074.216] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.232] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bec2b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1 [0074.243] GetProcessHeap () returned 0x3150000 [0074.243] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.280] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sr-Latn-RS\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bec2b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0074.281] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bec2b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.281] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bec81b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deeplink", cAlternateFileName="")) returned 1 [0074.281] GetProcessHeap () returned 0x3150000 [0074.281] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sr-Latn-RS\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bec81b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.281] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bec81b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.282] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1534, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.282] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1537, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.282] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1523, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.282] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x153b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.282] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a12c48, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a12c48, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a12c48, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x153b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.282] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0074.282] GetProcessHeap () returned 0x3150000 [0074.282] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.282] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x149c, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.282] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.282] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3becbe0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0074.282] GetProcessHeap () returned 0x3150000 [0074.282] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sr-Latn-RS\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3becbe0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.283] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3becbe0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.283] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.283] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x534, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.283] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x534, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.283] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0074.283] GetProcessHeap () returned 0x3150000 [0074.283] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.283] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3becbe0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0074.283] FindClose (in: hFindFile=0x57d2178 | out: hFindFile=0x57d2178) returned 1 [0074.284] GetProcessHeap () returned 0x3150000 [0074.284] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.284] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bed082, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0074.285] GetProcessHeap () returned 0x3150000 [0074.285] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.285] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sv-se\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bed082, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.285] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bed082, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.285] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bed675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deeplink", cAlternateFileName="")) returned 1 [0074.285] GetProcessHeap () returned 0x3150000 [0074.285] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sv-se\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bed675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0074.286] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bed675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.286] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x155d, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.286] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1574, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.286] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1556, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.286] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1570, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.286] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1570, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.286] FindClose (in: hFindFile=0x57d1c78 | out: hFindFile=0x57d1c78) returned 1 [0074.286] GetProcessHeap () returned 0x3150000 [0074.286] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.286] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x14db, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.287] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x47d, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.287] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beda39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0074.287] GetProcessHeap () returned 0x3150000 [0074.287] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sv-se\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beda39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0074.287] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beda39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.287] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.287] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x527, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.287] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x527, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.287] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0074.287] GetProcessHeap () returned 0x3150000 [0074.287] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.287] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beda39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0074.287] FindClose (in: hFindFile=0x57d20f8 | out: hFindFile=0x57d20f8) returned 1 [0074.287] GetProcessHeap () returned 0x3150000 [0074.287] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.288] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beddee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw-KE", cAlternateFileName="")) returned 1 [0074.288] GetProcessHeap () returned 0x3150000 [0074.288] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sw-KE\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beddee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0074.289] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beddee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.289] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bee32b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deeplink", cAlternateFileName="")) returned 1 [0074.289] GetProcessHeap () returned 0x3150000 [0074.289] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sw-KE\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bee32b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0074.290] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bee32b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.290] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1504, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.290] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1513, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.290] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.290] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x152c, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.290] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a38efd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x152c, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.290] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0074.291] GetProcessHeap () returned 0x3150000 [0074.291] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.291] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a38efd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a38efd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1482, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.291] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.291] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bee724, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0074.291] GetProcessHeap () returned 0x3150000 [0074.291] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\sw-KE\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bee724, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.291] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bee724, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.291] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x587, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.291] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.291] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.291] FindClose (in: hFindFile=0x57d20f8 | out: hFindFile=0x57d20f8) returned 1 [0074.291] GetProcessHeap () returned 0x3150000 [0074.291] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.291] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bee724, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0074.291] FindClose (in: hFindFile=0x57d2178 | out: hFindFile=0x57d2178) returned 1 [0074.292] GetProcessHeap () returned 0x3150000 [0074.292] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.292] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beeb8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta-in", cAlternateFileName="")) returned 1 [0074.292] GetProcessHeap () returned 0x3150000 [0074.292] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ta-in\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beeb8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0074.293] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3beeb8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.293] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bef129, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deeplink", cAlternateFileName="")) returned 1 [0074.293] GetProcessHeap () returned 0x3150000 [0074.293] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ta-in\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bef129, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.294] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bef129, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.294] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1af9, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.294] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1b0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.294] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1ae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.294] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1b57, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.294] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1b57, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.295] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0074.295] GetProcessHeap () returned 0x3150000 [0074.295] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.295] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1a55, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.295] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.295] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bef4e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0074.295] GetProcessHeap () returned 0x3150000 [0074.295] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ta-in\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bef4e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0074.295] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bef4e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.295] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3befa5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0074.295] GetProcessHeap () returned 0x3150000 [0074.295] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0074.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ta-in\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3befa5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0074.296] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3befa5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.296] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="local.css", cAlternateFileName="")) returned 1 [0074.296] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="locale-companion.css", cAlternateFileName="")) returned 1 [0074.296] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="locale-companion.css", cAlternateFileName="")) returned 0 [0074.296] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0074.296] GetProcessHeap () returned 0x3150000 [0074.296] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0074.296] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3befa5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 0 [0074.296] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0074.296] GetProcessHeap () returned 0x3150000 [0074.296] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.297] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3befed4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0074.297] GetProcessHeap () returned 0x3150000 [0074.297] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\ta-in\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3befed4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0074.297] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3befed4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.297] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x6fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.297] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x676, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.297] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x676, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.297] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0074.298] GetProcessHeap () returned 0x3150000 [0074.298] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.298] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3befed4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0074.298] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0074.298] GetProcessHeap () returned 0x3150000 [0074.298] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.299] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf0322, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te-in", cAlternateFileName="")) returned 1 [0074.299] GetProcessHeap () returned 0x3150000 [0074.299] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\te-in\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf0322, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0074.300] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf0322, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.300] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf0907, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deeplink", cAlternateFileName="")) returned 1 [0074.300] GetProcessHeap () returned 0x3150000 [0074.300] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\te-in\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf0907, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0074.301] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf0907, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.301] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x19ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.301] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a5f0d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x19c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.301] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a5f0d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a5f0d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x198d, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.301] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x19be, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.301] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x19be, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.301] FindClose (in: hFindFile=0x57d2178 | out: hFindFile=0x57d2178) returned 1 [0074.301] GetProcessHeap () returned 0x3150000 [0074.301] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.301] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1911, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.301] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x591, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.301] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf0ccf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0074.301] GetProcessHeap () returned 0x3150000 [0074.301] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\te-in\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf0ccf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0074.302] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf0ccf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.302] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf11bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0074.302] GetProcessHeap () returned 0x3150000 [0074.302] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0074.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\te-in\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf11bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0074.302] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf11bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.302] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="local.css", cAlternateFileName="")) returned 1 [0074.302] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="locale-companion.css", cAlternateFileName="")) returned 1 [0074.302] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2da0, dwReserved0=0x0, dwReserved1=0x0, cFileName="locale-companion.css", cAlternateFileName="")) returned 0 [0074.302] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0074.302] GetProcessHeap () returned 0x3150000 [0074.302] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0074.302] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf11bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 0 [0074.302] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0074.303] GetProcessHeap () returned 0x3150000 [0074.303] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.303] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf1630, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0074.303] GetProcessHeap () returned 0x3150000 [0074.303] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\te-in\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf1630, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0074.303] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf1630, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.303] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x6e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.303] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x661, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.304] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x661, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.304] FindClose (in: hFindFile=0x57d1e38 | out: hFindFile=0x57d1e38) returned 1 [0074.304] GetProcessHeap () returned 0x3150000 [0074.304] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.304] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf1630, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0074.304] FindClose (in: hFindFile=0x57d22b8 | out: hFindFile=0x57d22b8) returned 1 [0074.304] GetProcessHeap () returned 0x3150000 [0074.304] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.305] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf1ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-th", cAlternateFileName="")) returned 1 [0074.305] GetProcessHeap () returned 0x3150000 [0074.305] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\th-th\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf1ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0074.305] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf1ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.305] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2013, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deeplink", cAlternateFileName="")) returned 1 [0074.305] GetProcessHeap () returned 0x3150000 [0074.305] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\th-th\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2013, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.306] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2013, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.306] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1935, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.306] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.306] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x197b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.306] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x19af, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.306] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x19af, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.306] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0074.306] GetProcessHeap () returned 0x3150000 [0074.307] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.307] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x18fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.307] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.307] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2407, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0074.307] GetProcessHeap () returned 0x3150000 [0074.307] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\th-th\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2407, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.307] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2407, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.307] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf294c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0074.307] GetProcessHeap () returned 0x3150000 [0074.307] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0074.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\th-th\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf294c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.308] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf294c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.308] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="local.css", cAlternateFileName="")) returned 1 [0074.308] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="locale-companion.css", cAlternateFileName="")) returned 1 [0074.308] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1a8534f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="locale-companion.css", cAlternateFileName="")) returned 0 [0074.308] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0074.308] GetProcessHeap () returned 0x3150000 [0074.308] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0074.308] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1a8534f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf294c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1a8534f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 0 [0074.308] FindClose (in: hFindFile=0x57d20f8 | out: hFindFile=0x57d20f8) returned 1 [0074.308] GetProcessHeap () returned 0x3150000 [0074.308] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.309] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2d5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0074.309] GetProcessHeap () returned 0x3150000 [0074.309] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\th-th\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2d5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0074.310] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2d5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.310] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.310] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.310] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.310] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0074.310] GetProcessHeap () returned 0x3150000 [0074.310] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.310] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf2d5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0074.310] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0074.310] GetProcessHeap () returned 0x3150000 [0074.310] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.311] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3210, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0074.311] GetProcessHeap () returned 0x3150000 [0074.311] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\tr-tr\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3210, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0074.312] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3210, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.312] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3726, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deeplink", cAlternateFileName="")) returned 1 [0074.312] GetProcessHeap () returned 0x3150000 [0074.312] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\tr-tr\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3726, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0074.312] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3726, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.312] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15de, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.312] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.313] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15da, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.313] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.313] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.313] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0074.428] GetProcessHeap () returned 0x3150000 [0074.428] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x155a, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.428] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3b3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0074.428] GetProcessHeap () returned 0x3150000 [0074.428] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\tr-tr\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3b3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.429] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3b3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.429] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.429] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.429] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.430] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0074.430] GetProcessHeap () returned 0x3150000 [0074.430] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.430] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3b3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0074.430] FindClose (in: hFindFile=0x57d22b8 | out: hFindFile=0x57d22b8) returned 1 [0074.430] GetProcessHeap () returned 0x3150000 [0074.431] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.431] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3fcb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0074.431] GetProcessHeap () returned 0x3150000 [0074.431] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.432] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\uk-ua\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3fcb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0074.432] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf3fcb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.432] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf4499, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deeplink", cAlternateFileName="")) returned 1 [0074.432] GetProcessHeap () returned 0x3150000 [0074.432] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\uk-ua\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf4499, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.433] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf4499, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.433] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1752, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.433] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1752, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.433] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x173f, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.433] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x176a, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.433] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x176a, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.433] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0074.433] GetProcessHeap () returned 0x3150000 [0074.433] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.433] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x16ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.433] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x52f, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.433] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf485b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0074.434] GetProcessHeap () returned 0x3150000 [0074.434] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\uk-ua\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf485b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0074.434] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf485b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.434] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1aab505, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1aab505, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x668, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.434] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.434] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.434] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0074.434] GetProcessHeap () returned 0x3150000 [0074.434] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.434] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1aab505, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf485b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0074.434] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0074.434] GetProcessHeap () returned 0x3150000 [0074.434] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.434] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf4d14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UND", cAlternateFileName="")) returned 1 [0074.434] GetProcessHeap () returned 0x3150000 [0074.434] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.434] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\UND\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf4d14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0074.436] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf4d14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.436] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf51a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deeplink", cAlternateFileName="")) returned 1 [0074.436] GetProcessHeap () returned 0x3150000 [0074.436] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.436] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\UND\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf51a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.436] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf51a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.436] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x151d, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.437] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1524, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.437] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.437] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x152a, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.437] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x152a, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.437] FindClose (in: hFindFile=0x57d20f8 | out: hFindFile=0x57d20f8) returned 1 [0074.437] GetProcessHeap () returned 0x3150000 [0074.437] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.437] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x149b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.437] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x463, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.437] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf55fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows", cAlternateFileName="")) returned 1 [0074.437] GetProcessHeap () returned 0x3150000 [0074.437] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.437] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\UND\\windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf55fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.437] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf55fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.437] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.438] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x51b, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.438] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x51b, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.438] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0074.438] GetProcessHeap () returned 0x3150000 [0074.438] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.438] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf55fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows", cAlternateFileName="")) returned 0 [0074.438] FindClose (in: hFindFile=0x57d22b8 | out: hFindFile=0x57d22b8) returned 1 [0074.438] GetProcessHeap () returned 0x3150000 [0074.438] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.438] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf5a88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uz-latn-uz", cAlternateFileName="UZ-LAT~1")) returned 1 [0074.438] GetProcessHeap () returned 0x3150000 [0074.438] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\uz-latn-uz\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf5a88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0074.438] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf5a88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.438] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf5f1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deeplink", cAlternateFileName="")) returned 1 [0074.438] GetProcessHeap () returned 0x3150000 [0074.438] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.438] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\uz-latn-uz\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf5f1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0074.444] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf5f1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.444] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.444] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.444] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.444] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.445] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.445] FindClose (in: hFindFile=0x57d22b8 | out: hFindFile=0x57d22b8) returned 1 [0074.445] GetProcessHeap () returned 0x3150000 [0074.445] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.445] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1552, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.445] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.445] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf62e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0074.445] GetProcessHeap () returned 0x3150000 [0074.445] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.445] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\uz-latn-uz\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf62e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.445] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf62e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.445] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5df, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.445] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.445] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1ad1747, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.445] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0074.446] GetProcessHeap () returned 0x3150000 [0074.446] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.446] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1ad1747, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf62e7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1ad1747, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0074.446] FindClose (in: hFindFile=0x57d1e38 | out: hFindFile=0x57d1e38) returned 1 [0074.446] GetProcessHeap () returned 0x3150000 [0074.446] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.446] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf6794, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi-vn", cAlternateFileName="")) returned 1 [0074.447] GetProcessHeap () returned 0x3150000 [0074.447] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.447] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\vi-vn\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf6794, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0074.447] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf6794, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.447] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf6cab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deeplink", cAlternateFileName="")) returned 1 [0074.447] GetProcessHeap () returned 0x3150000 [0074.447] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.448] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\vi-vn\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf6cab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0074.448] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf6cab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.448] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1694, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.448] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1683, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.448] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x167a, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.448] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x16a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.448] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x16a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.448] FindClose (in: hFindFile=0x57d1c78 | out: hFindFile=0x57d1c78) returned 1 [0074.448] GetProcessHeap () returned 0x3150000 [0074.448] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.448] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.448] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.449] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7081, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0074.449] GetProcessHeap () returned 0x3150000 [0074.449] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.449] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\vi-vn\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7081, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0074.450] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7081, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.450] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.450] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x523, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.450] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x523, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.450] FindClose (in: hFindFile=0x57d22b8 | out: hFindFile=0x57d22b8) returned 1 [0074.450] GetProcessHeap () returned 0x3150000 [0074.450] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.450] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7081, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0074.450] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0074.450] GetProcessHeap () returned 0x3150000 [0074.450] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.451] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf75e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0074.451] GetProcessHeap () returned 0x3150000 [0074.451] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-cn\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf75e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0074.452] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf75e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.452] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7b08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deeplink", cAlternateFileName="")) returned 1 [0074.452] GetProcessHeap () returned 0x3150000 [0074.452] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-cn\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7b08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.452] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7b08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.453] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x14f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_cortana.xhtml", cAlternateFileName="")) returned 1 [0074.453] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x14f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_music.xhtml", cAlternateFileName="")) returned 1 [0074.453] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x14f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_onenote.xhtml", cAlternateFileName="")) returned 1 [0074.453] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1503, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 1 [0074.453] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1503, dwReserved0=0x0, dwReserved1=0x0, cFileName="index_photos.xhtml", cAlternateFileName="")) returned 0 [0074.453] FindClose (in: hFindFile=0x57d20f8 | out: hFindFile=0x57d20f8) returned 1 [0074.453] GetProcessHeap () returned 0x3150000 [0074.453] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.453] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1474, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.xhtml", cAlternateFileName="")) returned 1 [0074.453] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="offline.xhtml", cAlternateFileName="")) returned 1 [0074.453] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7f94, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1 [0074.453] GetProcessHeap () returned 0x3150000 [0074.453] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-cn\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7f94, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0074.453] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf7f94, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.453] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf8494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0074.454] GetProcessHeap () returned 0x3150000 [0074.454] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0074.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-cn\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf8494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0074.466] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf8494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.466] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="local.css", cAlternateFileName="")) returned 1 [0074.466] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="locale-companion.css", cAlternateFileName="")) returned 1 [0074.466] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1af78f1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2dd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="locale-companion.css", cAlternateFileName="")) returned 0 [0074.466] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0074.466] GetProcessHeap () returned 0x3150000 [0074.466] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0074.466] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf8494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1af78f1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 0 [0074.466] FindClose (in: hFindFile=0x57d1c78 | out: hFindFile=0x57d1c78) returned 1 [0074.466] GetProcessHeap () returned 0x3150000 [0074.466] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf8a12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0074.467] GetProcessHeap () returned 0x3150000 [0074.467] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.467] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-cn\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf8a12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.467] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1af78f1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf8a12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1b1da7e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra.xhtml", cAlternateFileName="")) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1b1da7e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 1 [0074.467] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1b1da7e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="deviceinfoextra_new.xhtml", cAlternateFileName="")) returned 0 [0074.467] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0074.467] GetProcessHeap () returned 0x3150000 [0074.467] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.469] GetProcessHeap () returned 0x3150000 [0074.469] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.469] GetProcessHeap () returned 0x3150000 [0074.469] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.470] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-tw\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf8e94, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0074.470] GetProcessHeap () returned 0x3150000 [0074.470] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-tw\\deeplink\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf947e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.471] GetProcessHeap () returned 0x3150000 [0074.471] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.471] GetProcessHeap () returned 0x3150000 [0074.471] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-tw\\resources\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf9830, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0074.482] GetProcessHeap () returned 0x3150000 [0074.482] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0074.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-tw\\resources\\css\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bf9d4c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.482] GetProcessHeap () returned 0x3150000 [0074.482] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0074.482] GetProcessHeap () returned 0x3150000 [0074.482] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.482] GetProcessHeap () returned 0x3150000 [0074.482] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html\\zh-tw\\Windows\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3bfa0ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0074.482] GetProcessHeap () returned 0x3150000 [0074.482] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.482] GetProcessHeap () returned 0x3150000 [0074.483] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.484] GetProcessHeap () returned 0x3150000 [0074.484] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.484] GetProcessHeap () returned 0x3150000 [0074.484] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7c923e77, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xb3bfa622, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.485] GetProcessHeap () returned 0x3150000 [0074.485] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.485] GetProcessHeap () returned 0x3150000 [0074.485] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391e1bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1384417, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0074.488] GetProcessHeap () returned 0x3150000 [0074.488] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.488] GetProcessHeap () returned 0x3150000 [0074.488] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0074.699] GetProcessHeap () returned 0x3150000 [0074.699] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0074.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1121ceb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3c565ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0074.893] GetProcessHeap () returned 0x3150000 [0074.893] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1121ceb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3c57272, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1121ceb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0074.894] GetProcessHeap () returned 0x3150000 [0074.894] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.894] GetProcessHeap () returned 0x3150000 [0074.894] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.894] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7c923e77, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xb3c57d4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0074.894] GetProcessHeap () returned 0x3150000 [0074.894] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.894] GetProcessHeap () returned 0x3150000 [0074.894] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0074.895] GetProcessHeap () returned 0x3150000 [0074.895] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0074.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542e769c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0074.903] GetProcessHeap () returned 0x3150000 [0074.903] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54333b4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cb474b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x54333b4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0074.904] GetProcessHeap () returned 0x3150000 [0074.904] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.904] GetProcessHeap () returned 0x3150000 [0074.904] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54333b4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cb4e9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x546fe097, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0074.950] GetProcessHeap () returned 0x3150000 [0074.950] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.950] GetProcessHeap () returned 0x3150000 [0074.950] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xffa513a7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0074.951] GetProcessHeap () returned 0x3150000 [0074.951] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.951] GetProcessHeap () returned 0x3150000 [0074.951] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0074.951] GetProcessHeap () returned 0x3150000 [0074.951] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0074.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541b63c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.959] GetProcessHeap () returned 0x3150000 [0074.959] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541b63c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3d1c8f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x541b63c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0074.959] GetProcessHeap () returned 0x3150000 [0074.959] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.959] GetProcessHeap () returned 0x3150000 [0074.959] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xffa513a7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0074.964] GetProcessHeap () returned 0x3150000 [0074.964] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.964] GetProcessHeap () returned 0x3150000 [0074.964] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0074.965] GetProcessHeap () returned 0x3150000 [0074.965] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0074.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1117e7db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0074.972] GetProcessHeap () returned 0x3150000 [0074.972] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x111a4a34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3d7d8df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x111a4a34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0074.973] GetProcessHeap () returned 0x3150000 [0074.973] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x111a4a34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3d7e235, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1123d39e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0074.976] GetProcessHeap () returned 0x3150000 [0074.976] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.977] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x111a4a34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3de5d38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x111cac92, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0074.986] GetProcessHeap () returned 0x3150000 [0074.986] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.986] GetProcessHeap () returned 0x3150000 [0074.986] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x111cac92, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4905e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x111f0eec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0074.993] GetProcessHeap () returned 0x3150000 [0074.994] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0074.994] GetProcessHeap () returned 0x3150000 [0074.994] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0074.994] GetProcessHeap () returned 0x3150000 [0074.994] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.995] GetProcessHeap () returned 0x3150000 [0074.995] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x209d0ef, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0074.995] GetProcessHeap () returned 0x3150000 [0074.995] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.995] GetProcessHeap () returned 0x3150000 [0074.995] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0074.996] GetProcessHeap () returned 0x3150000 [0074.996] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0074.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf79c53c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0074.997] GetProcessHeap () returned 0x3150000 [0074.997] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7c2795, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4b375, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7c2795, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.997] GetProcessHeap () returned 0x3150000 [0074.997] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0074.997] GetProcessHeap () returned 0x3150000 [0074.997] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0074.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf834ea6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4b71c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfb96d5c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0074.997] GetProcessHeap () returned 0x3150000 [0074.997] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0074.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf834ea6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4bdce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfb96d5c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0074.999] GetProcessHeap () returned 0x3150000 [0074.999] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0074.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf834ea6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3eeb1e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf96617e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0075.197] GetProcessHeap () returned 0x3150000 [0075.197] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0075.197] GetProcessHeap () returned 0x3150000 [0075.197] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0075.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf96617e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f52d0b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfa7abce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0075.199] GetProcessHeap () returned 0x3150000 [0075.199] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0075.199] GetProcessHeap () returned 0x3150000 [0075.199] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0075.200] GetProcessHeap () returned 0x3150000 [0075.200] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.200] GetProcessHeap () returned 0x3150000 [0075.200] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Content\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbbcfe3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f54435, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfbbcfe3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0075.201] GetProcessHeap () returned 0x3150000 [0075.201] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.201] GetProcessHeap () returned 0x3150000 [0075.201] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x209d0ef, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xef0f4f22, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef0f4f22, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0075.201] GetProcessHeap () returned 0x3150000 [0075.201] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.201] GetProcessHeap () returned 0x3150000 [0075.201] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\MS.Entertainment.Common\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff9cd23, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f552d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xff9cd23, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0075.201] GetProcessHeap () returned 0x3150000 [0075.201] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0075.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\MS.Entertainment.Common\\Resources\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff9cd23, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f55972, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xff9cd23, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0075.202] GetProcessHeap () returned 0x3150000 [0075.202] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0075.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\MS.Entertainment.Common\\Resources\\Fonts\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff9cd23, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f55f81, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xff9cd23, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0075.203] GetProcessHeap () returned 0x3150000 [0075.203] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0075.203] GetProcessHeap () returned 0x3150000 [0075.203] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0075.204] GetProcessHeap () returned 0x3150000 [0075.204] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.204] GetProcessHeap () returned 0x3150000 [0075.204] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100cdffb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f56a17, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x100f4259, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0075.205] GetProcessHeap () returned 0x3150000 [0075.205] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0075.205] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\Fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100cdffb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f574c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x100f4259, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0075.205] GetProcessHeap () returned 0x3150000 [0075.205] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0075.205] GetProcessHeap () returned 0x3150000 [0075.205] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0075.206] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\RetailDemo\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100f4259, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f57c18, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0075.206] GetProcessHeap () returned 0x3150000 [0075.206] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0075.211] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\RetailDemo\\data\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100f4259, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f58472, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x100f4259, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0075.212] GetProcessHeap () returned 0x3150000 [0075.212] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0075.212] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\RetailDemo\\data\\en-us\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100f4259, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f58d9f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1014070c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0075.212] GetProcessHeap () returned 0x3150000 [0075.212] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0075.213] GetProcessHeap () returned 0x3150000 [0075.213] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0075.214] GetProcessHeap () returned 0x3150000 [0075.214] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0075.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\RetailDemo\\strings\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1016696a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f595cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0075.214] GetProcessHeap () returned 0x3150000 [0075.214] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0075.214] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources\\RetailDemo\\strings\\en-us\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1016696a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f59e2a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0075.214] GetProcessHeap () returned 0x3150000 [0075.214] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0075.215] GetProcessHeap () returned 0x3150000 [0075.215] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0075.215] GetProcessHeap () returned 0x3150000 [0075.215] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0075.215] GetProcessHeap () returned 0x3150000 [0075.215] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.216] GetProcessHeap () returned 0x3150000 [0075.216] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.216] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\UX\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1016696a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f5a955, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0075.217] GetProcessHeap () returned 0x3150000 [0075.217] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0075.217] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\UX\\Controls\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1016696a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f5b29e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0075.217] GetProcessHeap () returned 0x3150000 [0075.217] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0075.218] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\UX\\Controls\\Xbox360PurchaseControl\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1016696a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f5bc07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0075.218] GetProcessHeap () returned 0x3150000 [0075.218] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0075.218] GetProcessHeap () returned 0x3150000 [0075.218] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0075.219] GetProcessHeap () returned 0x3150000 [0075.219] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.219] GetProcessHeap () returned 0x3150000 [0075.219] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStore\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10ef5fcd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f5c5b2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x10ef5fcd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0075.219] GetProcessHeap () returned 0x3150000 [0075.219] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0075.219] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStore\\Resources\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10ef5fcd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f5cf2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x10ef5fcd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0075.220] GetProcessHeap () returned 0x3150000 [0075.220] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0075.220] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStore\\Resources\\Assets\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10ef5fcd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3fa6f00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x10f686dd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0075.225] GetProcessHeap () returned 0x3150000 [0075.225] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0075.225] GetProcessHeap () returned 0x3150000 [0075.225] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0075.226] GetProcessHeap () returned 0x3150000 [0075.226] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.226] GetProcessHeap () returned 0x3150000 [0075.226] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7e89f3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4adae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf834ea6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0075.226] GetProcessHeap () returned 0x3150000 [0075.226] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.226] GetProcessHeap () returned 0x3150000 [0075.226] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0075.227] GetProcessHeap () returned 0x3150000 [0075.227] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0075.227] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf703bd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2076e87, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2076e87, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0075.229] GetProcessHeap () returned 0x3150000 [0075.229] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf703bd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb40028af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf703bd2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0075.230] GetProcessHeap () returned 0x3150000 [0075.230] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.230] GetProcessHeap () returned 0x3150000 [0075.230] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x2076e87, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2076e87, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2076e87, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0075.230] GetProcessHeap () returned 0x3150000 [0075.230] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.230] GetProcessHeap () returned 0x3150000 [0075.230] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0075.231] GetProcessHeap () returned 0x3150000 [0075.231] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0075.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x722d4fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0075.233] GetProcessHeap () returned 0x3150000 [0075.233] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x722d4fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4075472, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x722d4fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0075.233] GetProcessHeap () returned 0x3150000 [0075.233] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.233] GetProcessHeap () returned 0x3150000 [0075.233] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4b15022, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0075.234] GetProcessHeap () returned 0x3150000 [0075.234] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.234] GetProcessHeap () returned 0x3150000 [0075.234] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0075.234] GetProcessHeap () returned 0x3150000 [0075.234] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0075.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7242c4d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0075.235] GetProcessHeap () returned 0x3150000 [0075.235] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7247898c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb414678b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7247898c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0075.236] GetProcessHeap () returned 0x3150000 [0075.236] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.236] GetProcessHeap () returned 0x3150000 [0075.236] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x725a9c6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4260cb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x72abd1b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0075.874] GetProcessHeap () returned 0x3150000 [0075.874] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0075.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Assets\\IDPValueAssets\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x729d8393, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4262e1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x729d8393, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0075.875] GetProcessHeap () returned 0x3150000 [0075.875] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0075.875] GetProcessHeap () returned 0x3150000 [0075.875] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0075.875] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Assets\\LiveTiles\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x729fe5ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb42639e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x72a4aa9f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0075.875] GetProcessHeap () returned 0x3150000 [0075.875] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0075.875] GetProcessHeap () returned 0x3150000 [0075.875] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0075.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Assets\\NavigationIcons\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72a4aa9f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb42ad90c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x72abd1b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0075.880] GetProcessHeap () returned 0x3150000 [0075.880] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0075.880] GetProcessHeap () returned 0x3150000 [0075.880] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.881] GetProcessHeap () returned 0x3150000 [0075.881] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4b15022, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb42aefde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0075.882] GetProcessHeap () returned 0x3150000 [0075.882] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.882] GetProcessHeap () returned 0x3150000 [0075.882] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Microsoft.Xbox.SmartGlass.Controls\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72cad059, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb430cdb6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x72cd32ad, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0075.885] GetProcessHeap () returned 0x3150000 [0075.885] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.889] GetProcessHeap () returned 0x3150000 [0075.889] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Toolkit\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x735f4896, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb430e354, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x735f4896, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0075.890] GetProcessHeap () returned 0x3150000 [0075.890] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0075.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Toolkit\\Images\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x735f4896, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb430f16e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x735f4896, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0075.891] GetProcessHeap () returned 0x3150000 [0075.891] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0075.891] GetProcessHeap () returned 0x3150000 [0075.891] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.891] GetProcessHeap () returned 0x3150000 [0075.891] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\winsdkfb\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7374aaed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb430f766, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7374aaed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0075.903] GetProcessHeap () returned 0x3150000 [0075.903] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0075.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\winsdkfb\\Images\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7374aaed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb430fd7a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7374aaed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0075.903] GetProcessHeap () returned 0x3150000 [0075.903] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0075.903] GetProcessHeap () returned 0x3150000 [0075.903] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.903] GetProcessHeap () returned 0x3150000 [0075.903] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.903] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.Model\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74382c1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb431012d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x743a8e78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0075.904] GetProcessHeap () returned 0x3150000 [0075.904] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.904] GetProcessHeap () returned 0x3150000 [0075.904] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.Resource\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743f532f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4310576, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x743f532f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0075.904] GetProcessHeap () returned 0x3150000 [0075.904] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.904] GetProcessHeap () returned 0x3150000 [0075.904] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.904] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.Telemetry\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744417e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4310977, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x744417e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0075.905] GetProcessHeap () returned 0x3150000 [0075.905] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.906] GetProcessHeap () returned 0x3150000 [0075.906] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.UI\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74467a40, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4310d48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74467a40, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0075.906] GetProcessHeap () returned 0x3150000 [0075.906] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0075.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.UI\\Resources\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74467a40, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4311295, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x744b3ef7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0075.906] GetProcessHeap () returned 0x3150000 [0075.906] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0075.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.UI\\Resources\\Images\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74467a40, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb43fbd39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x744b3ef7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0075.910] GetProcessHeap () returned 0x3150000 [0075.910] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0075.910] GetProcessHeap () returned 0x3150000 [0075.910] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0075.911] GetProcessHeap () returned 0x3150000 [0075.911] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.911] GetProcessHeap () returned 0x3150000 [0075.911] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7247898c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4145312, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x725a9c6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0075.914] GetProcessHeap () returned 0x3150000 [0075.914] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.914] GetProcessHeap () returned 0x3150000 [0075.914] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0075.914] GetProcessHeap () returned 0x3150000 [0075.915] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0075.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77c427fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5aba784, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5aba784, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0075.920] GetProcessHeap () returned 0x3150000 [0075.920] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77cb4f0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb44d2941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77d2c754, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0075.931] GetProcessHeap () returned 0x3150000 [0075.931] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.931] GetProcessHeap () returned 0x3150000 [0075.931] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5aba784, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5aba784, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5aba784, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0075.932] GetProcessHeap () returned 0x3150000 [0075.932] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.932] GetProcessHeap () returned 0x3150000 [0075.932] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0075.933] GetProcessHeap () returned 0x3150000 [0075.933] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0075.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77993d99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0075.935] GetProcessHeap () returned 0x3150000 [0075.935] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77993d99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb453b7da, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77993d99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0075.937] GetProcessHeap () returned 0x3150000 [0075.937] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.937] GetProcessHeap () returned 0x3150000 [0075.937] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a9451f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0075.944] GetProcessHeap () returned 0x3150000 [0075.945] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.945] GetProcessHeap () returned 0x3150000 [0075.945] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0075.945] GetProcessHeap () returned 0x3150000 [0075.945] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0075.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0075.946] GetProcessHeap () returned 0x3150000 [0075.946] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb45ebf24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b5d9ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0075.946] GetProcessHeap () returned 0x3150000 [0075.946] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.946] GetProcessHeap () returned 0x3150000 [0075.946] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb46b4450, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b83c34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0075.950] GetProcessHeap () returned 0x3150000 [0075.950] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.950] GetProcessHeap () returned 0x3150000 [0075.950] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3175758 [0075.950] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a9451f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x93541eb1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x93541eb1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0075.955] GetProcessHeap () returned 0x3150000 [0075.955] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3175758 | out: hHeap=0x3150000) returned 1 [0075.955] GetProcessHeap () returned 0x3150000 [0075.955] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0075.956] GetProcessHeap () returned 0x3150000 [0075.956] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0076.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b5b0339, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x678b204, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x678b204, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0076.085] GetProcessHeap () returned 0x3150000 [0076.085] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b5fc7cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb46b70ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7b5fc7cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0076.096] GetProcessHeap () returned 0x3150000 [0076.096] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.097] GetProcessHeap () returned 0x3150000 [0076.100] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.100] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b622a24, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb47458bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7b66eedc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0076.116] GetProcessHeap () returned 0x3150000 [0076.116] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.116] GetProcessHeap () returned 0x3150000 [0076.116] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x678b204, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x678b204, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x678b204, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0076.118] GetProcessHeap () returned 0x3150000 [0076.118] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.119] GetProcessHeap () returned 0x3150000 [0076.119] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0076.119] GetProcessHeap () returned 0x3150000 [0076.119] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0076.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b373fc2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6765034, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0076.122] GetProcessHeap () returned 0x3150000 [0076.122] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b373fc2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb47e5156, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7b373fc2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0076.122] GetProcessHeap () returned 0x3150000 [0076.122] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.122] GetProcessHeap () returned 0x3150000 [0076.122] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6765034, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb47e59a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0076.126] GetProcessHeap () returned 0x3150000 [0076.126] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.126] GetProcessHeap () returned 0x3150000 [0076.126] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0076.126] GetProcessHeap () returned 0x3150000 [0076.126] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0076.126] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dcfe45d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0076.132] GetProcessHeap () returned 0x3150000 [0076.132] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dd4a88d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb48b760b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6dd96d60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0076.139] GetProcessHeap () returned 0x3150000 [0076.139] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.139] GetProcessHeap () returned 0x3150000 [0076.139] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74a814e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0076.141] GetProcessHeap () returned 0x3150000 [0076.141] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.141] GetProcessHeap () returned 0x3150000 [0076.141] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0076.142] GetProcessHeap () returned 0x3150000 [0076.142] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0076.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d9f57ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0076.148] GetProcessHeap () returned 0x3150000 [0076.149] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.149] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d9f57ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb48f2fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6d9f57ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0076.325] GetProcessHeap () returned 0x3150000 [0076.325] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.330] GetProcessHeap () returned 0x3150000 [0076.330] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7482029, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0076.342] GetProcessHeap () returned 0x3150000 [0076.343] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.343] GetProcessHeap () returned 0x3150000 [0076.343] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0076.344] GetProcessHeap () returned 0x3150000 [0076.344] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0076.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0076.360] GetProcessHeap () returned 0x3150000 [0076.360] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb497d3de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6dbbf423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0076.361] GetProcessHeap () returned 0x3150000 [0076.361] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.361] GetProcessHeap () returned 0x3150000 [0076.361] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dc02f4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb497fc88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6dc1958b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0076.364] GetProcessHeap () returned 0x3150000 [0076.364] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.364] GetProcessHeap () returned 0x3150000 [0076.364] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.364] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74a814e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x92416342, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x92416342, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0076.364] GetProcessHeap () returned 0x3150000 [0076.364] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.364] GetProcessHeap () returned 0x3150000 [0076.364] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0076.365] GetProcessHeap () returned 0x3150000 [0076.365] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0076.365] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ed154e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa241231, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa241231, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0076.366] GetProcessHeap () returned 0x3150000 [0076.366] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.367] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ed3b73a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a3bd63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3eea3226, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0076.368] GetProcessHeap () returned 0x3150000 [0076.368] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.368] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ed3b73a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a3df5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3ede465e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0076.562] GetProcessHeap () returned 0x3150000 [0076.563] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0076.575] GetProcessHeap () returned 0x3150000 [0076.575] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.575] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ede465e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a97f86, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3ee0a8bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0076.590] GetProcessHeap () returned 0x3150000 [0076.590] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0076.590] GetProcessHeap () returned 0x3150000 [0076.590] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.590] GetProcessHeap () returned 0x3150000 [0076.590] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.590] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xa241231, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa241231, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa241231, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0076.591] GetProcessHeap () returned 0x3150000 [0076.591] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0076.591] GetProcessHeap () returned 0x3150000 [0076.591] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0076.592] GetProcessHeap () returned 0x3150000 [0076.592] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0076.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0076.593] GetProcessHeap () returned 0x3150000 [0076.593] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0d3791, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a9ac9b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3d0d3791, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0076.593] GetProcessHeap () returned 0x3150000 [0076.593] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0076.593] GetProcessHeap () returned 0x3150000 [0076.593] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0f99eb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a9ba91, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3d5567d5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0076.595] GetProcessHeap () returned 0x3150000 [0076.595] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d1de810, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4bab566, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3d2ca3d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0076.606] GetProcessHeap () returned 0x3150000 [0076.606] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.606] GetProcessHeap () returned 0x3150000 [0076.606] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d2ca3d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4bfe82c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3d3fcf21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0076.618] GetProcessHeap () returned 0x3150000 [0076.618] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.618] GetProcessHeap () returned 0x3150000 [0076.618] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0076.619] GetProcessHeap () returned 0x3150000 [0076.619] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.619] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Images\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3df6f66f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4bffc30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3df6f66f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0076.620] GetProcessHeap () returned 0x3150000 [0076.620] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0076.620] GetProcessHeap () returned 0x3150000 [0076.620] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.620] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xa21af8a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x910dd35a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x910dd35a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0076.620] GetProcessHeap () returned 0x3150000 [0076.620] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0076.620] GetProcessHeap () returned 0x3150000 [0076.620] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.620] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ea9e4fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4c00eb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3ea9e4fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0076.620] GetProcessHeap () returned 0x3150000 [0076.620] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.621] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Resources\\Fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ea9e4fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4c018f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3ea9e4fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0076.621] GetProcessHeap () returned 0x3150000 [0076.621] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.621] GetProcessHeap () returned 0x3150000 [0076.621] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0076.621] GetProcessHeap () returned 0x3150000 [0076.621] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0076.623] GetProcessHeap () returned 0x3150000 [0076.623] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0076.623] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfa24be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0076.625] GetProcessHeap () returned 0x3150000 [0076.625] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.625] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfa24be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4c7df06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cfa24be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0076.626] GetProcessHeap () returned 0x3150000 [0076.626] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0076.626] GetProcessHeap () returned 0x3150000 [0076.626] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.626] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xa21af8a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0076.633] GetProcessHeap () returned 0x3150000 [0076.633] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0076.633] GetProcessHeap () returned 0x3150000 [0076.633] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0076.634] GetProcessHeap () returned 0x3150000 [0076.634] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0076.634] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x442f2a78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0076.635] GetProcessHeap () returned 0x3150000 [0076.635] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.636] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44318cd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4d06ebb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0076.642] GetProcessHeap () returned 0x3150000 [0076.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.642] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44318cd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4d9e571, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x44365189, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0076.871] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44318cd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4d9e571, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x44365189, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.871] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44318cd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4433ef34, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4433ef34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.scale-150_contrast-black.png", cAlternateFileName="")) returned 1 [0076.871] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4433ef34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4433ef34, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4433ef34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LargeLogo.scale-150_contrast-black.png", cAlternateFileName="")) returned 1 [0076.872] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4433ef34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4433ef34, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4433ef34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logo.scale-150_contrast-black.png", cAlternateFileName="")) returned 1 [0076.872] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4433ef34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4433ef34, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4433ef34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Movie-TVStoreLogo.scale-150_contrast-black.png", cAlternateFileName="")) returned 1 [0076.872] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4433ef34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4433ef34, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4433ef34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x195, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmallLogo.scale-150_contrast-black.png", cAlternateFileName="")) returned 1 [0076.872] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4433ef34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44365189, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44365189, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x87a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-150_contrast-black.png", cAlternateFileName="")) returned 1 [0076.872] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44365189, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44365189, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44365189, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WideLogo.scale-150_contrast-black.png", cAlternateFileName="")) returned 1 [0076.872] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44365189, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44365189, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44365189, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WideLogo.scale-150_contrast-black.png", cAlternateFileName="")) returned 0 [0076.872] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0076.873] GetProcessHeap () returned 0x3150000 [0076.873] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.873] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44365189, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4da0efb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4438b3e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1 [0076.873] GetProcessHeap () returned 0x3150000 [0076.873] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0076.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44365189, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4da0efb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4438b3e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0076.875] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44365189, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4da0efb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4438b3e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.875] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44365189, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44365189, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44365189, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x153, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.scale-150_contrast-white.png", cAlternateFileName="")) returned 1 [0076.875] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44365189, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4438b3e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4438b3e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="LargeLogo.scale-150_contrast-white.png", cAlternateFileName="")) returned 1 [0076.875] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4438b3e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4438b3e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4438b3e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logo.scale-150_contrast-white.png", cAlternateFileName="")) returned 1 [0076.875] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4438b3e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4438b3e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4438b3e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="Movie-TVStoreLogo.scale-150_contrast-white.png", cAlternateFileName="")) returned 1 [0076.875] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4438b3e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4438b3e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4438b3e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmallLogo.scale-150_contrast-white.png", cAlternateFileName="")) returned 1 [0076.875] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4438b3e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4438b3e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4438b3e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x888, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-150_contrast-white.png", cAlternateFileName="")) returned 1 [0076.875] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4438b3e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4438b3e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4438b3e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WideLogo.scale-150_contrast-white.png", cAlternateFileName="")) returned 1 [0076.875] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4438b3e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4438b3e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4438b3e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="WideLogo.scale-150_contrast-white.png", cAlternateFileName="")) returned 0 [0076.875] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0076.876] GetProcessHeap () returned 0x3150000 [0076.876] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0076.876] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4438b3e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4438b3e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4438b3e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LargeLogo.scale-150.png", cAlternateFileName="")) returned 1 [0076.876] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4438b3e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4438b3e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4438b3e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logo.scale-150.png", cAlternateFileName="")) returned 1 [0076.876] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b1640, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x443b1640, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="Movie-TVStoreLogo.scale-150.png", cAlternateFileName="")) returned 1 [0076.876] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b1640, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x443b1640, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x195, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmallLogo.scale-150.png", cAlternateFileName="")) returned 1 [0076.876] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b1640, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x443b1640, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x87a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-150.png", cAlternateFileName="")) returned 1 [0076.876] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b1640, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x443b1640, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WideLogo.scale-150.png", cAlternateFileName="")) returned 1 [0076.877] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b1640, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x443b1640, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WideLogo.scale-150.png", cAlternateFileName="")) returned 0 [0076.877] FindClose (in: hFindFile=0x57d1c78 | out: hFindFile=0x57d1c78) returned 1 [0076.877] GetProcessHeap () returned 0x3150000 [0076.877] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0076.877] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc676e57, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0076.877] GetProcessHeap () returned 0x3150000 [0076.878] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0076.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc676e57, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0077.002] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc676e57, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.002] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc676e57, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.002] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0077.002] GetProcessHeap () returned 0x3150000 [0077.002] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.002] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b1640, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x443b1640, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0077.002] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b1640, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x443b1640, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0 [0077.002] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0077.002] GetProcessHeap () returned 0x3150000 [0077.002] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0077.004] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42af40a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI691C~1.0_X")) returned 1 [0077.004] GetProcessHeap () returned 0x3150000 [0077.004] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0077.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42af40a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0077.004] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42af40a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.004] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b1a300, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b4055a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b4055a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0077.004] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b1a300, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b1a300, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b1a300, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x38a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1 [0077.004] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4e04e1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x42b667b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0077.004] GetProcessHeap () returned 0x3150000 [0077.004] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4e04e1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x42b667b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0077.005] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4e04e1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x42b667b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.005] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b667b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b667b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1 [0077.005] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b667b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b667b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0 [0077.005] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0077.005] GetProcessHeap () returned 0x3150000 [0077.005] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.005] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4055a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b667b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b667b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0077.005] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4e05885, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43432dd6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0077.005] GetProcessHeap () returned 0x3150000 [0077.005] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4e05885, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43432dd6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0077.006] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4e05885, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43432dd6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.006] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b667b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b667b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.scale-100.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b8ca15, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b8ca15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-16.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8ca15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b8ca15, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b8ca15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-16_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8ca15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b8ca15, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b8ca15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-20.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8ca15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b8ca15, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b8ca15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-20_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8ca15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b8ca15, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b8ca15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-24.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8ca15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b8ca15, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b8ca15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-24_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b8ca15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b8ca15, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b8ca15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-256.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bb2c6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bb2c6a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bb2c6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-256_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bb2c6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bb2c6a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bb2c6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-30.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bb2c6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bb2c6a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bb2c6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-30_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bb2c6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bb2c6a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bb2c6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-32.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bb2c6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bb2c6a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bb2c6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-32_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bb2c6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bb2c6a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bb2c6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-36.png", cAlternateFileName="")) returned 1 [0077.007] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bd8ec8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bd8ec8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bd8ec8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-36_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bd8ec8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bd8ec8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bd8ec8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-40.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bd8ec8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bd8ec8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bd8ec8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-40_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bd8ec8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bd8ec8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bd8ec8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-48.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bd8ec8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bd8ec8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bd8ec8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-48_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bd8ec8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bd8ec8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bd8ec8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-60.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bff121, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bff121, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bff121, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-60_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bff121, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bff121, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bff121, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x167, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-64.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bff121, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bff121, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bff121, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x167, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-64_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bff121, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bff121, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bff121, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-72.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bff121, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42bff121, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42bff121, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-72_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c2537b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c2537b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c2537b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-80.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c2537b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c2537b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c2537b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-80_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.008] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c2537b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c2537b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c2537b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x202, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-96.png", cAlternateFileName="")) returned 1 [0077.009] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c2537b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c2537b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c2537b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x202, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-96_altform-unplated.png", cAlternateFileName="")) returned 1 [0077.009] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42c2537b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4eb45c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x42d580cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-black", cAlternateFileName="CONTRA~1")) returned 1 [0077.009] GetProcessHeap () returned 0x3150000 [0077.009] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0077.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42c2537b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4eb45c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x42d580cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0077.010] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42c2537b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4eb45c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x42d580cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.011] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c2537b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c2537b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c2537b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0077.011] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c2537b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c2537b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c2537b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-16_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.011] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c4b5d8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c4b5d8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c4b5d8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-16_contrast-black.png", cAlternateFileName="")) returned 1 [0077.011] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c4b5d8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c4b5d8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c4b5d8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-20_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.011] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c4b5d8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c4b5d8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c4b5d8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-20_contrast-black.png", cAlternateFileName="")) returned 1 [0077.011] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c4b5d8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c4b5d8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c4b5d8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-24_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.011] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c4b5d8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c4b5d8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c4b5d8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-24_contrast-black.png", cAlternateFileName="")) returned 1 [0077.011] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c4b5d8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c4b5d8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c4b5d8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-256_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.011] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c4b5d8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c71832, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c71832, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-256_contrast-black.png", cAlternateFileName="")) returned 1 [0077.011] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c71832, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c71832, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c71832, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-30_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.011] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c71832, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c71832, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c71832, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-30_contrast-black.png", cAlternateFileName="")) returned 1 [0077.012] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c71832, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c71832, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c71832, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-32_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.012] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c97a90, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c97a90, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c97a90, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-32_contrast-black.png", cAlternateFileName="")) returned 1 [0077.012] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c97a90, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c97a90, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c97a90, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-36_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.012] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c97a90, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c97a90, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c97a90, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-36_contrast-black.png", cAlternateFileName="")) returned 1 [0077.012] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c97a90, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42c97a90, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42c97a90, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-40_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.012] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c97a90, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42cbdcee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42cbdcee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-40_contrast-black.png", cAlternateFileName="")) returned 1 [0077.012] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42cbdcee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42cbdcee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42cbdcee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-48_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.012] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42cbdcee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42cbdcee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42cbdcee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x131, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-48_contrast-black.png", cAlternateFileName="")) returned 1 [0077.012] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42cbdcee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42cbdcee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42cbdcee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-60_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.012] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42cbdcee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42cbdcee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42cbdcee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-60_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42cbdcee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42cbdcee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42cbdcee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x167, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-64_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42cbdcee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42cbdcee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42cbdcee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x167, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-64_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ce3f42, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42ce3f42, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42ce3f42, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-72_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ce3f42, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42ce3f42, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42ce3f42, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-72_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ce3f42, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42ce3f42, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42ce3f42, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-80_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ce3f42, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42ce3f42, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42ce3f42, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-80_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ce3f42, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d0a1a0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d0a1a0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x202, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-96_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d0a1a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d0a1a0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d0a1a0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x202, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-96_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d0a1a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d0a1a0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d0a1a0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="LargeLogo.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d0a1a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d0a1a0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d0a1a0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logo.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d0a1a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d303fe, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d303fe, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="Movie-TVStoreLogo.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d31e49, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d31e49, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d31e49, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmallLogo.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0077.013] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d31e49, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d31e49, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d31e49, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x525, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0077.014] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d580cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d580cc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d580cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WideLogo.scale-100_contrast-black.png", cAlternateFileName="")) returned 1 [0077.014] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d580cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d580cc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d580cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WideLogo.scale-100_contrast-black.png", cAlternateFileName="")) returned 0 [0077.014] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0077.014] GetProcessHeap () returned 0x3150000 [0077.014] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0077.015] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d580cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f44a2e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4312482c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1 [0077.015] GetProcessHeap () returned 0x3150000 [0077.015] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0077.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d580cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f44a2e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4312482c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.016] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d580cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f44a2e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4312482c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.016] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d580cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d580cc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d580cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0077.016] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d7e325, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d7e325, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d7e325, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-16_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.016] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d7e325, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d7e325, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d7e325, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-16_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d7e325, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42d7e325, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42d7e325, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-20_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42da4583, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42da4583, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42da4583, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-20_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42da4583, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42da4583, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42da4583, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-24_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42da4583, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42da4583, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42da4583, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-24_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42da4583, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42da4583, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42da4583, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-256_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42da4583, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42df0a36, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42df0a36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-256_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42df0a36, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42df0a36, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42df0a36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-30_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42df0a36, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42df0a36, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42df0a36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-30_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42df0a36, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42df0a36, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42df0a36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-32_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42df0a36, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42df0a36, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42df0a36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-32_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42df0a36, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42df0a36, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42df0a36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-36_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e16cab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e16cab, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e16cab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-36_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e16cab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e16cab, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e16cab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-40_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.017] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e16cab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e16cab, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e16cab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-40_contrast-white.png", cAlternateFileName="")) returned 1 [0077.018] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e16cab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e16cab, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e16cab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x135, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-48_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.018] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e16cab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e16cab, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e16cab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x135, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-48_contrast-white.png", cAlternateFileName="")) returned 1 [0077.018] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e16cab, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e16cab, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e16cab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x163, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-60_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.018] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e3cf09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e3cf09, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e3cf09, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x163, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-60_contrast-white.png", cAlternateFileName="")) returned 1 [0077.018] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e3cf09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e3cf09, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e3cf09, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-64_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.018] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e3cf09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e3cf09, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e3cf09, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-64_contrast-white.png", cAlternateFileName="")) returned 1 [0077.018] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e3cf09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e3cf09, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e3cf09, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-72_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.018] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e3cf09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e3cf09, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e3cf09, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-72_contrast-white.png", cAlternateFileName="")) returned 1 [0077.019] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e6315d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e6315d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e6315d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-80_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.019] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e6315d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42e6315d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42e6315d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-80_contrast-white.png", cAlternateFileName="")) returned 1 [0077.019] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e6315d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42f47f6c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42f47f6c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-96_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1 [0077.019] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43063e72, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43063e72, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43063e72, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppList.targetsize-96_contrast-white.png", cAlternateFileName="")) returned 1 [0077.019] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430d8346, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x430d8346, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x430d8346, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x459, dwReserved0=0x0, dwReserved1=0x0, cFileName="LargeLogo.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0077.019] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430d8346, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x430d8346, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x430d8346, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logo.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0077.019] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430d8346, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x430d8346, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x430d8346, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="Movie-TVStoreLogo.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0077.019] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430fe5d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x430fe5d2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x430fe5d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmallLogo.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0077.019] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430fe5d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x430fe5d2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x430fe5d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0077.019] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4312482c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4312482c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4312482c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WideLogo.scale-100_contrast-white.png", cAlternateFileName="")) returned 1 [0077.020] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4312482c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4312482c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4312482c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WideLogo.scale-100_contrast-white.png", cAlternateFileName="")) returned 0 [0077.020] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0077.020] GetProcessHeap () returned 0x3150000 [0077.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0077.020] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4312482c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4314aa85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4314aa85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileExtension.targetsize-129.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43172c57, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43172c57, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43172c57, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileExtension.targetsize-16.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43172c57, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43172c57, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43172c57, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileExtension.targetsize-20.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43172c57, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43172c57, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43172c57, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileExtension.targetsize-24.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43172c57, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43172c57, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43172c57, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x134f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileExtension.targetsize-256.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43172c57, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43198353, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43198353, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileExtension.targetsize-32.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43198353, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4325bd7d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4325bd7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileExtension.targetsize-336.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4325bd7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43281ff2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43281ff2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileExtension.targetsize-40.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43281ff2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x432b1826, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x432b1826, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileExtension.targetsize-48.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432b1826, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x432fdd03, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x432fdd03, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileExtension.targetsize-63.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432fdd03, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x432fdd03, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x432fdd03, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x598, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileExtension.targetsize-64.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43323f5c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43323f5c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43323f5c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="LargeLogo.scale-100.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43323f5c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43323f5c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43323f5c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logo.scale-100.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43323f5c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43323f5c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43323f5c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="Movie-TVStoreLogo.scale-100.png", cAlternateFileName="")) returned 1 [0077.021] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4334a1ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4334a1ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4334a1ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmallLogo.scale-100.png", cAlternateFileName="")) returned 1 [0077.022] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4334a1ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x433be5e6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x433be5e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x525, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-100.png", cAlternateFileName="")) returned 1 [0077.022] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433be5e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x433be5e6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x433be5e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="video_offline_demo_page1.jpg", cAlternateFileName="")) returned 1 [0077.022] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433be5e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x433e4840, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x433e4840, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x198d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="video_offline_demo_page1_alternate.jpg", cAlternateFileName="")) returned 1 [0077.022] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433e4840, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4340aa99, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4340aa99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd713, dwReserved0=0x0, dwReserved1=0x0, cFileName="video_offline_demo_page2.jpg", cAlternateFileName="")) returned 1 [0077.022] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4340aa99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43432dd6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43432dd6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a005, dwReserved0=0x0, dwReserved1=0x0, cFileName="video_offline_demo_page3.jpg", cAlternateFileName="")) returned 1 [0077.022] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43432dd6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43432dd6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43432dd6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WideLogo.scale-100.png", cAlternateFileName="")) returned 1 [0077.022] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43432dd6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43432dd6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43432dd6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WideLogo.scale-100.png", cAlternateFileName="")) returned 0 [0077.022] FindClose (in: hFindFile=0x57d20b8 | out: hFindFile=0x57d20b8) returned 1 [0077.022] GetProcessHeap () returned 0x3150000 [0077.022] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.022] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43432dd6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4377950e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4377950e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7b4970, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntCommon.dll", cAlternateFileName="")) returned 1 [0077.022] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4377950e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43a9a68b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43a9a68b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8e7f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntPlat.dll", cAlternateFileName="")) returned 1 [0077.022] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43a9a68b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43ae6b3d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43ae6b3d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa4570, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntSyncFx.dll", cAlternateFileName="")) returned 1 [0077.022] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b0cd9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43b0cd9b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43b0cd9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gnsdk_fp.dll", cAlternateFileName="")) returned 1 [0077.022] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b0cd9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f45932, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b0cd9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1 [0077.023] GetProcessHeap () returned 0x3150000 [0077.023] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Images\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b0cd9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f45932, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b0cd9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0077.023] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b0cd9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f45932, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b0cd9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.023] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b0cd9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43b32ff4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43b32ff4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlankImage.png", cAlternateFileName="")) returned 1 [0077.023] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b0cd9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43b32ff4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43b32ff4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BlankImage.png", cAlternateFileName="")) returned 0 [0077.023] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0077.023] GetProcessHeap () returned 0x3150000 [0077.023] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.023] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc676e57, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8ee4b0ec, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8ee4b0ec, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0077.023] GetProcessHeap () returned 0x3150000 [0077.023] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc676e57, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8ee4b0ec, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8ee4b0ec, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.023] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc676e57, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8ee4b0ec, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8ee4b0ec, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.023] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe080ce15, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xe080ce15, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xe080ce15, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1ea10, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.2bb76f1c.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1 [0077.023] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe080ce15, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xe080ce15, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xe080ce15, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1ea10, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", cAlternateFileName="")) returned 1 [0077.024] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe080ce15, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xe080ce15, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xe080ce15, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1ea10, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", cAlternateFileName="")) returned 0 [0077.024] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0077.024] GetProcessHeap () returned 0x3150000 [0077.024] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.024] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b7f4ac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f46c57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b7f4ac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0077.024] GetProcessHeap () returned 0x3150000 [0077.024] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Resources\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b7f4ac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f46c57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b7f4ac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0077.024] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b7f4ac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f46c57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b7f4ac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.024] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b7f4ac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f47595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b7f4ac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0077.024] GetProcessHeap () returned 0x3150000 [0077.024] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0077.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Resources\\Fonts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b7f4ac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f47595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b7f4ac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0077.024] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b7f4ac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f47595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b7f4ac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.024] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b7f4ac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43ba5705, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43ba5705, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc318, dwReserved0=0x0, dwReserved1=0x0, cFileName="SegMVR2.ttf", cAlternateFileName="")) returned 1 [0077.024] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b7f4ac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43ba5705, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43ba5705, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc318, dwReserved0=0x0, dwReserved1=0x0, cFileName="SegMVR2.ttf", cAlternateFileName="")) returned 0 [0077.025] FindClose (in: hFindFile=0x57d20b8 | out: hFindFile=0x57d20b8) returned 1 [0077.025] GetProcessHeap () returned 0x3150000 [0077.025] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0077.025] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b7f4ac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f47595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b7f4ac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0 [0077.025] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0077.025] GetProcessHeap () returned 0x3150000 [0077.025] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.025] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b32ff4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43b7f4ac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43b7f4ac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcfb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1 [0077.025] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ba5705, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44102bd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44102bd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11b1b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Video.UI.exe", cAlternateFileName="")) returned 1 [0077.025] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ba5705, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44102bd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44102bd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11b1b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Video.UI.exe", cAlternateFileName="")) returned 0 [0077.025] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0077.025] GetProcessHeap () returned 0x3150000 [0077.025] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0077.026] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc650cb3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI984C~1.0_N")) returned 1 [0077.027] GetProcessHeap () returned 0x3150000 [0077.027] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0077.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc650cb3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0077.028] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc650cb3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.028] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42acde49, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42acde49, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42acde49, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1 [0077.028] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4fc4c9f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x429e902d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1 [0077.028] GetProcessHeap () returned 0x3150000 [0077.029] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4fc4c9f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x429e902d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0077.029] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4fc4c9f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x429e902d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.029] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x429e902d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x429e902d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x45dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1 [0077.030] FindNextFileW (in: hFindFile=0x57d1c78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x429e902d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x429e902d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x45dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0 [0077.030] FindClose (in: hFindFile=0x57d1c78 | out: hFindFile=0x57d1c78) returned 1 [0077.030] GetProcessHeap () returned 0x3150000 [0077.030] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.030] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42acde49, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42acde49, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42acde49, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2971, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1 [0077.030] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc650cb3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb4fc5793, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1 [0077.030] GetProcessHeap () returned 0x3150000 [0077.030] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc650cb3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb4fc5793, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0077.030] FindNextFileW (in: hFindFile=0x57d1cb8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc650cb3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb4fc5793, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.030] FindNextFileW (in: hFindFile=0x57d1cb8, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc650cb3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb4fc5793, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.030] FindClose (in: hFindFile=0x57d1cb8 | out: hFindFile=0x57d1cb8) returned 1 [0077.030] GetProcessHeap () returned 0x3150000 [0077.030] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.030] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc650cb3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb4fc5793, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0 [0077.030] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0077.030] GetProcessHeap () returned 0x3150000 [0077.030] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0077.031] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="MovedPackages", cAlternateFileName="MOVEDP~1")) returned 1 [0077.031] GetProcessHeap () returned 0x3150000 [0077.031] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0077.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\MovedPackages\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0077.032] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.032] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.032] FindClose (in: hFindFile=0x57d23f8 | out: hFindFile=0x57d23f8) returned 1 [0077.032] GetProcessHeap () returned 0x3150000 [0077.033] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0077.033] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="MovedPackages", cAlternateFileName="MOVEDP~1")) returned 0 [0077.033] FindClose (in: hFindFile=0x57d21f8 | out: hFindFile=0x57d21f8) returned 1 [0077.033] GetProcessHeap () returned 0x3150000 [0077.033] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0077.033] FindNextFileW (in: hFindFile=0x3162f78, lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x53a895a, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x53a895a, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0077.033] GetProcessHeap () returned 0x3150000 [0077.033] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0077.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x53a895a, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x53a895a, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0077.034] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x53a895a, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x53a895a, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="..", cAlternateFileName="")) returned 1 [0077.034] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0077.034] GetProcessHeap () returned 0x3150000 [0077.034] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0077.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Configuration\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0077.035] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502c09b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.035] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1 [0077.035] GetProcessHeap () returned 0x3150000 [0077.035] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.035] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Configuration\\Registration\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0077.038] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.038] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502cf82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.038] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0077.038] GetProcessHeap () returned 0x3150000 [0077.038] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.038] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Schema", cAlternateFileName="")) returned 1 [0077.038] GetProcessHeap () returned 0x3150000 [0077.038] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.038] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Configuration\\Schema\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0077.038] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.038] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0077.039] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0077.181] GetProcessHeap () returned 0x3150000 [0077.181] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.182] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Schema", cAlternateFileName="")) returned 0 [0077.182] FindClose (in: hFindFile=0x57d21f8 | out: hFindFile=0x57d21f8) returned 1 [0077.182] GetProcessHeap () returned 0x3150000 [0077.182] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0077.182] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa8db3e0, ftCreationTime.dwHighDateTime=0x1d525fa, ftLastAccessTime.dwLowDateTime=0x1ffb1ea0, ftLastAccessTime.dwHighDateTime=0x1d521a1, ftLastWriteTime.dwLowDateTime=0x1ffb1ea0, ftLastWriteTime.dwHighDateTime=0x1d521a1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="lightningdrama.exe", cAlternateFileName="LIGHTN~1.EXE")) returned 1 [0077.182] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xfffff982, cFileName="Modules", cAlternateFileName="")) returned 1 [0077.182] GetProcessHeap () returned 0x3150000 [0077.182] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0077.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0077.184] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.184] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0077.184] GetProcessHeap () returned 0x3150000 [0077.184] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0077.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0077.185] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.185] FindNextFileW (in: hFindFile=0x57d1e38, lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0077.185] GetProcessHeap () returned 0x3150000 [0077.185] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0077.222] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.223] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0077.223] GetProcessHeap () returned 0x3150000 [0077.223] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.223] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0077.223] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e05fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.223] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive", cAlternateFileName="COMPRE~1")) returned 1 [0077.223] GetProcessHeap () returned 0x3150000 [0077.223] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.224] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Comprehensive\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0077.224] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e148c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.224] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 1 [0077.224] FindNextFileW (in: hFindFile=0x57d20f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comprehensive.Tests.ps1", cAlternateFileName="")) returned 0 [0077.225] FindClose (in: hFindFile=0x57d20f8 | out: hFindFile=0x57d20f8) returned 1 [0077.225] GetProcessHeap () returned 0x3150000 [0077.225] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0077.225] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1 [0077.225] GetProcessHeap () returned 0x3150000 [0077.225] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.225] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.225] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.225] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 1 [0077.225] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple.Tests.ps1", cAlternateFileName="")) returned 0 [0077.225] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0077.225] GetProcessHeap () returned 0x3150000 [0077.225] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0077.225] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0 [0077.225] FindClose (in: hFindFile=0x57d21f8 | out: hFindFile=0x57d21f8) returned 1 [0077.225] GetProcessHeap () returned 0x3150000 [0077.225] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.226] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.Format.ps1xml", cAlternateFileName="")) returned 1 [0077.226] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.psd1", cAlternateFileName="")) returned 1 [0077.226] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3016, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.psm1", cAlternateFileName="")) returned 1 [0077.226] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x15b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OperationValidationResources.psd1", cAlternateFileName="")) returned 1 [0077.226] FindNextFileW (in: hFindFile=0x57d20b8, lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Test", cAlternateFileName="")) returned 1 [0077.226] GetProcessHeap () returned 0x3150000 [0077.226] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0077.226] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.226] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation.Tests.ps1", cAlternateFileName="")) returned 1 [0077.226] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0077.226] GetProcessHeap () returned 0x3150000 [0077.226] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.226] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0077.229] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.229] FindNextFileW (in: hFindFile=0x57d23f8, lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Example1.Diagnostics", cAlternateFileName="EXAMPL~1.DIA")) returned 1 [0077.229] GetProcessHeap () returned 0x3150000 [0077.229] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0077.229] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0077.232] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e5961, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.233] FindNextFileW (in: hFindFile=0x57d21f8, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 1 [0077.233] GetProcessHeap () returned 0x3150000 [0077.233] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0077.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0077.234] GetProcessHeap () returned 0x3150000 [0077.234] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0077.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example1.Diagnostics\\Diagnostics\\Simple\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0077.235] GetProcessHeap () returned 0x3150000 [0077.235] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0077.235] GetProcessHeap () returned 0x3150000 [0077.235] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0077.235] GetProcessHeap () returned 0x3150000 [0077.235] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0077.235] GetProcessHeap () returned 0x3150000 [0077.235] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0077.235] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0077.235] GetProcessHeap () returned 0x3150000 [0077.236] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0077.236] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0077.237] GetProcessHeap () returned 0x3150000 [0077.237] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0077.237] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e755b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0077.238] GetProcessHeap () returned 0x3150000 [0077.238] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0077.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example2.Diagnostics\\1.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0077.238] GetProcessHeap () returned 0x3150000 [0077.238] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0077.238] GetProcessHeap () returned 0x3150000 [0077.238] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0077.238] GetProcessHeap () returned 0x3150000 [0077.238] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0077.239] GetProcessHeap () returned 0x3150000 [0077.239] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0077.240] GetProcessHeap () returned 0x3150000 [0077.240] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0077.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0077.241] GetProcessHeap () returned 0x3150000 [0077.241] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0077.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e85b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0077.242] GetProcessHeap () returned 0x3150000 [0077.242] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0077.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0077.242] GetProcessHeap () returned 0x3150000 [0077.242] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0077.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\1.1.1\\Diagnostics\\Simple\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0077.242] GetProcessHeap () returned 0x3150000 [0077.242] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0077.242] GetProcessHeap () returned 0x3150000 [0077.242] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0077.242] GetProcessHeap () returned 0x3150000 [0077.242] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0077.243] GetProcessHeap () returned 0x3150000 [0077.243] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0077.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.244] GetProcessHeap () returned 0x3150000 [0077.244] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0077.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0077.322] GetProcessHeap () returned 0x3150000 [0077.322] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0077.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Test\\Modules\\Example3.Diagnostics\\2.0.1\\Diagnostics\\Simple\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0077.323] GetProcessHeap () returned 0x3150000 [0077.323] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0077.323] GetProcessHeap () returned 0x3150000 [0077.323] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0077.323] GetProcessHeap () returned 0x3150000 [0077.323] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0077.324] GetProcessHeap () returned 0x3150000 [0077.324] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0077.324] GetProcessHeap () returned 0x3150000 [0077.324] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0077.325] GetProcessHeap () returned 0x3150000 [0077.325] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.325] GetProcessHeap () returned 0x3150000 [0077.326] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.326] GetProcessHeap () returned 0x3150000 [0077.326] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0077.326] GetProcessHeap () returned 0x3150000 [0077.326] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0077.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0077.326] GetProcessHeap () returned 0x3150000 [0077.326] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0077.328] GetProcessHeap () returned 0x3150000 [0077.328] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.328] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\en\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb5188061, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0077.332] GetProcessHeap () returned 0x3150000 [0077.332] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.332] GetProcessHeap () returned 0x3150000 [0077.332] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.332] GetProcessHeap () returned 0x3150000 [0077.332] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0077.332] GetProcessHeap () returned 0x3150000 [0077.332] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0077.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0077.333] GetProcessHeap () returned 0x3150000 [0077.333] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0077.407] GetProcessHeap () returned 0x3150000 [0077.407] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\bin\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e40b4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0077.408] GetProcessHeap () returned 0x3150000 [0077.408] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.408] GetProcessHeap () returned 0x3150000 [0077.408] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\en-US\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4446, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0077.408] GetProcessHeap () returned 0x3150000 [0077.408] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.408] GetProcessHeap () returned 0x3150000 [0077.408] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0077.421] GetProcessHeap () returned 0x3150000 [0077.422] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Calculator\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e545b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0077.423] GetProcessHeap () returned 0x3150000 [0077.423] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0077.423] GetProcessHeap () returned 0x3150000 [0077.423] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Examples\\Validator\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0077.423] GetProcessHeap () returned 0x3150000 [0077.423] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0077.423] GetProcessHeap () returned 0x3150000 [0077.423] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.423] GetProcessHeap () returned 0x3150000 [0077.423] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0077.426] GetProcessHeap () returned 0x3150000 [0077.426] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Functions\\Assertions\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524d244, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x326cf05, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0077.496] GetProcessHeap () returned 0x3150000 [0077.496] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0077.496] GetProcessHeap () returned 0x3150000 [0077.496] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.496] GetProcessHeap () returned 0x3150000 [0077.496] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Snippets\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb529cac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x329315c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0077.515] GetProcessHeap () returned 0x3150000 [0077.515] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.515] GetProcessHeap () returned 0x3150000 [0077.515] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.517] GetProcessHeap () returned 0x3150000 [0077.517] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.517] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0077.520] GetProcessHeap () returned 0x3150000 [0077.520] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\bin\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529f7d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0077.520] GetProcessHeap () returned 0x3150000 [0077.520] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.520] GetProcessHeap () returned 0x3150000 [0077.520] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.520] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\en-US\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529ffc4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0077.521] GetProcessHeap () returned 0x3150000 [0077.521] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.521] GetProcessHeap () returned 0x3150000 [0077.521] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.521] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a070b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0077.521] GetProcessHeap () returned 0x3150000 [0077.521] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.522] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Calculator\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1107, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.523] GetProcessHeap () returned 0x3150000 [0077.523] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0077.523] GetProcessHeap () returned 0x3150000 [0077.523] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Examples\\Validator\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0077.523] GetProcessHeap () returned 0x3150000 [0077.523] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0077.523] GetProcessHeap () returned 0x3150000 [0077.523] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.523] GetProcessHeap () returned 0x3150000 [0077.523] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.523] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb531a14c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5dcb26, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0077.530] GetProcessHeap () returned 0x3150000 [0077.530] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.530] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Functions\\Assertions\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb537bc07, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a628ff7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0077.537] GetProcessHeap () returned 0x3150000 [0077.537] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0077.537] GetProcessHeap () returned 0x3150000 [0077.537] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.537] GetProcessHeap () returned 0x3150000 [0077.537] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Snippets\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53e92f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a64f261, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0077.539] GetProcessHeap () returned 0x3150000 [0077.539] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.539] GetProcessHeap () returned 0x3150000 [0077.539] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.541] GetProcessHeap () returned 0x3150000 [0077.541] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0077.541] GetProcessHeap () returned 0x3150000 [0077.541] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0077.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.541] GetProcessHeap () returned 0x3150000 [0077.541] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0077.544] GetProcessHeap () returned 0x3150000 [0077.544] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\en-US\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb53ed28c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0077.545] GetProcessHeap () returned 0x3150000 [0077.545] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.545] GetProcessHeap () returned 0x3150000 [0077.545] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.545] GetProcessHeap () returned 0x3150000 [0077.545] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0077.546] GetProcessHeap () returned 0x3150000 [0077.546] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0077.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0077.546] GetProcessHeap () returned 0x3150000 [0077.546] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb5477959, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0077.557] GetProcessHeap () returned 0x3150000 [0077.557] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\en\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfff2ff0e, ftCreationTime.dwHighDateTime=0x1d1a04a, ftLastAccessTime.dwLowDateTime=0xb5478c6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0077.558] GetProcessHeap () returned 0x3150000 [0077.558] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.558] GetProcessHeap () returned 0x3150000 [0077.558] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.558] GetProcessHeap () returned 0x3150000 [0077.558] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.558] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0077.597] GetProcessHeap () returned 0x3150000 [0077.597] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\en\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xb54d81cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0077.598] GetProcessHeap () returned 0x3150000 [0077.598] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.598] GetProcessHeap () returned 0x3150000 [0077.598] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.598] GetProcessHeap () returned 0x3150000 [0077.598] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0077.598] GetProcessHeap () returned 0x3150000 [0077.598] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57b1bf8 | out: hHeap=0x3150000) returned 1 [0077.599] GetProcessHeap () returned 0x3150000 [0077.599] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57d2c10 | out: hHeap=0x3150000) returned 1 [0077.599] GetProcessHeap () returned 0x3150000 [0077.599] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31dd918 | out: hHeap=0x3150000) returned 1 [0077.600] GetProcessHeap () returned 0x3150000 [0077.600] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31dd918 [0077.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\*", lpFindFileData=0x53ef5c8 | out: lpFindFileData=0x53ef5c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x240010, dwReserved1=0x450047, cFileName=".", cAlternateFileName="")) returned 0x57d1c78 [0077.600] GetProcessHeap () returned 0x3150000 [0077.600] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57d2c10 [0077.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x53ef338 | out: lpFindFileData=0x53ef338*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x53a895a, ftLastAccessTime.dwHighDateTime=0x1d59363, ftLastWriteTime.dwLowDateTime=0x53a895a, ftLastWriteTime.dwHighDateTime=0x1d59363, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1cb8 [0077.601] GetProcessHeap () returned 0x3150000 [0077.601] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57b1bf8 [0077.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\*", lpFindFileData=0x53ef0a8 | out: lpFindFileData=0x53ef0a8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20b8 [0077.601] GetProcessHeap () returned 0x3150000 [0077.601] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0077.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.602] GetProcessHeap () returned 0x3150000 [0077.602] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x31fe930 | out: hHeap=0x3150000) returned 1 [0077.602] GetProcessHeap () returned 0x3150000 [0077.602] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x31fe930 [0077.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\*", lpFindFileData=0x53eee18 | out: lpFindFileData=0x53eee18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23f8 [0077.603] GetProcessHeap () returned 0x3150000 [0077.603] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0077.604] GetProcessHeap () returned 0x3150000 [0077.604] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0077.689] GetProcessHeap () returned 0x3150000 [0077.689] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.689] GetProcessHeap () returned 0x3150000 [0077.689] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.689] GetProcessHeap () returned 0x3150000 [0077.689] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.690] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0077.691] GetProcessHeap () returned 0x3150000 [0077.691] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.691] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0077.692] GetProcessHeap () returned 0x3150000 [0077.692] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.692] GetProcessHeap () returned 0x3150000 [0077.692] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.692] GetProcessHeap () returned 0x3150000 [0077.692] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.692] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0077.693] GetProcessHeap () returned 0x3150000 [0077.693] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.693] GetProcessHeap () returned 0x3150000 [0077.693] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0077.693] GetProcessHeap () returned 0x3150000 [0077.693] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.693] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0077.694] GetProcessHeap () returned 0x3150000 [0077.694] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.694] GetProcessHeap () returned 0x3150000 [0077.694] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.695] GetProcessHeap () returned 0x3150000 [0077.695] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0077.696] GetProcessHeap () returned 0x3150000 [0077.696] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.696] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0077.700] GetProcessHeap () returned 0x3150000 [0077.700] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.700] GetProcessHeap () returned 0x3150000 [0077.700] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.701] GetProcessHeap () returned 0x3150000 [0077.701] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.701] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0077.708] GetProcessHeap () returned 0x3150000 [0077.708] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.708] GetProcessHeap () returned 0x3150000 [0077.708] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.708] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.709] GetProcessHeap () returned 0x3150000 [0077.709] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.709] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0077.709] GetProcessHeap () returned 0x3150000 [0077.709] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.709] GetProcessHeap () returned 0x3150000 [0077.709] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.710] GetProcessHeap () returned 0x3150000 [0077.710] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.710] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0077.711] GetProcessHeap () returned 0x3150000 [0077.711] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.711] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.711] GetProcessHeap () returned 0x3150000 [0077.711] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.712] GetProcessHeap () returned 0x3150000 [0077.712] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.712] GetProcessHeap () returned 0x3150000 [0077.712] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.712] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0077.718] GetProcessHeap () returned 0x3150000 [0077.718] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.718] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0077.777] GetProcessHeap () returned 0x3150000 [0077.777] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0077.779] GetProcessHeap () returned 0x3150000 [0077.779] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0077.779] GetProcessHeap () returned 0x3150000 [0077.779] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.779] GetProcessHeap () returned 0x3150000 [0077.779] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0077.780] GetProcessHeap () returned 0x3150000 [0077.780] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0077.780] GetProcessHeap () returned 0x3150000 [0077.780] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0077.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38979854, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3899fa98, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0077.781] GetProcessHeap () returned 0x3150000 [0077.781] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0077.781] GetProcessHeap () returned 0x3150000 [0077.781] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0077.781] GetProcessHeap () returned 0x3150000 [0077.781] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.782] GetProcessHeap () returned 0x3150000 [0077.782] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.782] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.783] GetProcessHeap () returned 0x3150000 [0077.783] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0077.784] GetProcessHeap () returned 0x3150000 [0077.784] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b70048 | out: hHeap=0x3150000) returned 1 [0077.784] GetProcessHeap () returned 0x3150000 [0077.784] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.784] GetProcessHeap () returned 0x3150000 [0077.784] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0077.785] GetProcessHeap () returned 0x3150000 [0077.785] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.785] GetProcessHeap () returned 0x3150000 [0077.785] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.787] GetProcessHeap () returned 0x3150000 [0077.787] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.787] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.788] GetProcessHeap () returned 0x3150000 [0077.788] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.788] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0077.789] GetProcessHeap () returned 0x3150000 [0077.789] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5771bd8 | out: hHeap=0x3150000) returned 1 [0077.789] GetProcessHeap () returned 0x3150000 [0077.789] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.789] GetProcessHeap () returned 0x3150000 [0077.789] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.789] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0077.792] GetProcessHeap () returned 0x3150000 [0077.792] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.792] GetProcessHeap () returned 0x3150000 [0077.792] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0077.793] GetProcessHeap () returned 0x3150000 [0077.793] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5761bd0 | out: hHeap=0x3150000) returned 1 [0077.793] GetProcessHeap () returned 0x3150000 [0077.793] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5761bd0 [0077.793] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\*", lpFindFileData=0x53eeb88 | out: lpFindFileData=0x53eeb88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e38 [0077.794] GetProcessHeap () returned 0x3150000 [0077.794] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5771bd8 [0077.794] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\*", lpFindFileData=0x53ee8f8 | out: lpFindFileData=0x53ee8f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d21f8 [0077.926] GetProcessHeap () returned 0x3150000 [0077.926] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b70048 [0077.927] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\*", lpFindFileData=0x53ee668 | out: lpFindFileData=0x53ee668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d20f8 [0077.928] GetProcessHeap () returned 0x3150000 [0077.928] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0077.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.930] GetProcessHeap () returned 0x3150000 [0077.930] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0077.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0077.931] GetProcessHeap () returned 0x3150000 [0077.931] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0077.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0077.931] GetProcessHeap () returned 0x3150000 [0077.931] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0077.931] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\cef\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0077.933] GetProcessHeap () returned 0x3150000 [0077.933] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0077.933] GetProcessHeap () returned 0x3150000 [0077.933] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0077.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\libs\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0077.934] GetProcessHeap () returned 0x3150000 [0077.934] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0077.934] GetProcessHeap () returned 0x3150000 [0077.934] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0077.934] GetProcessHeap () returned 0x3150000 [0077.934] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0077.934] GetProcessHeap () returned 0x3150000 [0077.934] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0077.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0077.934] GetProcessHeap () returned 0x3150000 [0077.934] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0077.934] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0077.935] GetProcessHeap () returned 0x3150000 [0077.935] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0077.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\cef\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0077.935] GetProcessHeap () returned 0x3150000 [0077.935] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0077.935] GetProcessHeap () returned 0x3150000 [0077.935] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0077.935] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\libs\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0077.935] GetProcessHeap () returned 0x3150000 [0077.935] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0077.935] GetProcessHeap () returned 0x3150000 [0077.935] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0077.935] GetProcessHeap () returned 0x3150000 [0077.935] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0077.936] GetProcessHeap () returned 0x3150000 [0077.936] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0077.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0077.937] GetProcessHeap () returned 0x3150000 [0077.937] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0077.937] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0077.938] GetProcessHeap () returned 0x3150000 [0077.938] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0077.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\cef\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0077.938] GetProcessHeap () returned 0x3150000 [0077.938] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0077.938] GetProcessHeap () returned 0x3150000 [0077.938] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0077.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\libs\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0077.938] GetProcessHeap () returned 0x3150000 [0077.938] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0077.938] GetProcessHeap () returned 0x3150000 [0077.938] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0077.938] GetProcessHeap () returned 0x3150000 [0077.938] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0077.939] GetProcessHeap () returned 0x3150000 [0077.939] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0077.940] GetProcessHeap () returned 0x3150000 [0077.940] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0077.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0077.942] GetProcessHeap () returned 0x3150000 [0077.942] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0077.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0077.946] GetProcessHeap () returned 0x3150000 [0077.946] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0077.946] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0077.948] GetProcessHeap () returned 0x3150000 [0077.948] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0077.948] GetProcessHeap () returned 0x3150000 [0077.948] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0077.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0077.949] GetProcessHeap () returned 0x3150000 [0077.949] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0077.949] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0077.951] GetProcessHeap () returned 0x3150000 [0077.951] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0077.951] GetProcessHeap () returned 0x3150000 [0077.951] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0077.951] GetProcessHeap () returned 0x3150000 [0077.951] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0077.951] GetProcessHeap () returned 0x3150000 [0077.951] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0077.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0077.953] GetProcessHeap () returned 0x3150000 [0077.953] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0077.953] GetProcessHeap () returned 0x3150000 [0077.953] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0077.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0077.954] GetProcessHeap () returned 0x3150000 [0077.954] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0077.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0077.957] GetProcessHeap () returned 0x3150000 [0077.957] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0077.957] GetProcessHeap () returned 0x3150000 [0077.957] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0077.957] GetProcessHeap () returned 0x3150000 [0077.957] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0077.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0077.960] GetProcessHeap () returned 0x3150000 [0077.960] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0077.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0077.961] GetProcessHeap () returned 0x3150000 [0077.961] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0077.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0077.963] GetProcessHeap () returned 0x3150000 [0077.963] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0077.963] GetProcessHeap () returned 0x3150000 [0077.963] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0077.963] GetProcessHeap () returned 0x3150000 [0077.963] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0077.964] GetProcessHeap () returned 0x3150000 [0077.964] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0077.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0078.043] GetProcessHeap () returned 0x3150000 [0078.043] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.043] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.044] GetProcessHeap () returned 0x3150000 [0078.044] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.044] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.046] GetProcessHeap () returned 0x3150000 [0078.046] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.046] GetProcessHeap () returned 0x3150000 [0078.046] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.047] GetProcessHeap () returned 0x3150000 [0078.047] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0078.047] GetProcessHeap () returned 0x3150000 [0078.047] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b80050 | out: hHeap=0x3150000) returned 1 [0078.048] GetProcessHeap () returned 0x3150000 [0078.048] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b80050 [0078.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\*", lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2178 [0078.050] GetProcessHeap () returned 0x3150000 [0078.050] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0078.053] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.055] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.055] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0078.055] GetProcessHeap () returned 0x3150000 [0078.056] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.056] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.056] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0078.056] GetProcessHeap () returned 0x3150000 [0078.056] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.056] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.061] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.061] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0078.061] GetProcessHeap () returned 0x3150000 [0078.061] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.061] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ar-ae\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.062] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.062] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.062] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0078.062] GetProcessHeap () returned 0x3150000 [0078.062] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.062] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0078.062] GetProcessHeap () returned 0x3150000 [0078.062] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.062] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.063] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.063] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.063] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.063] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.063] GetProcessHeap () returned 0x3150000 [0078.063] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.063] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0078.063] GetProcessHeap () returned 0x3150000 [0078.063] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.063] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.064] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.064] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.064] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.064] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.067] GetProcessHeap () returned 0x3150000 [0078.067] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.067] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0078.067] GetProcessHeap () returned 0x3150000 [0078.067] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.067] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.067] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.067] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.067] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.067] GetProcessHeap () returned 0x3150000 [0078.067] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.067] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0078.067] GetProcessHeap () returned 0x3150000 [0078.067] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.068] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.068] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xece, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.068] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xece, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.068] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.068] GetProcessHeap () returned 0x3150000 [0078.068] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.068] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0078.068] GetProcessHeap () returned 0x3150000 [0078.068] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.069] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.069] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.069] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.069] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0078.069] GetProcessHeap () returned 0x3150000 [0078.069] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.069] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0078.069] GetProcessHeap () returned 0x3150000 [0078.069] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0078.070] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.070] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.070] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.070] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0078.070] GetProcessHeap () returned 0x3150000 [0078.070] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.070] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0078.070] GetProcessHeap () returned 0x3150000 [0078.070] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.071] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.071] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.071] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.071] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.071] GetProcessHeap () returned 0x3150000 [0078.071] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.071] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0078.071] GetProcessHeap () returned 0x3150000 [0078.071] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0078.072] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.072] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.072] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.072] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0078.072] GetProcessHeap () returned 0x3150000 [0078.072] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.072] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0078.072] GetProcessHeap () returned 0x3150000 [0078.072] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.073] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.073] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.073] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.073] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0078.073] GetProcessHeap () returned 0x3150000 [0078.073] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.073] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0078.073] GetProcessHeap () returned 0x3150000 [0078.073] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.076] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.077] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.077] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.077] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0078.077] GetProcessHeap () returned 0x3150000 [0078.077] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.077] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0078.077] GetProcessHeap () returned 0x3150000 [0078.077] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.077] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0078.077] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.078] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.078] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.078] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0078.078] GetProcessHeap () returned 0x3150000 [0078.078] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.078] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0078.078] GetProcessHeap () returned 0x3150000 [0078.078] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.078] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.079] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.079] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.079] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0078.079] GetProcessHeap () returned 0x3150000 [0078.079] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.079] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0078.079] GetProcessHeap () returned 0x3150000 [0078.079] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.079] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\he-il\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.079] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.079] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.080] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.080] GetProcessHeap () returned 0x3150000 [0078.080] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0078.080] GetProcessHeap () returned 0x3150000 [0078.080] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.080] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.080] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0078.080] GetProcessHeap () returned 0x3150000 [0078.080] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.080] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0078.080] GetProcessHeap () returned 0x3150000 [0078.080] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0078.081] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.082] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.082] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.082] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0078.082] GetProcessHeap () returned 0x3150000 [0078.082] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.082] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0078.082] GetProcessHeap () returned 0x3150000 [0078.082] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.082] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.082] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.082] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.082] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.082] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0078.082] GetProcessHeap () returned 0x3150000 [0078.082] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.082] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0078.084] GetProcessHeap () returned 0x3150000 [0078.084] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.084] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.084] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.084] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.084] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0078.084] GetProcessHeap () returned 0x3150000 [0078.084] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.084] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0078.084] GetProcessHeap () returned 0x3150000 [0078.084] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.084] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.085] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.085] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.085] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.085] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0078.085] GetProcessHeap () returned 0x3150000 [0078.085] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.085] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0078.085] GetProcessHeap () returned 0x3150000 [0078.085] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.085] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.085] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.085] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.085] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.085] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.086] GetProcessHeap () returned 0x3150000 [0078.086] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.086] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0078.086] GetProcessHeap () returned 0x3150000 [0078.086] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.086] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.086] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.086] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.086] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.086] GetProcessHeap () returned 0x3150000 [0078.086] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.086] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0078.086] GetProcessHeap () returned 0x3150000 [0078.086] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0078.086] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.086] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xedf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.087] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xedf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.087] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0078.087] GetProcessHeap () returned 0x3150000 [0078.087] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.087] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0078.087] GetProcessHeap () returned 0x3150000 [0078.087] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.087] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.104] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.104] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.104] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.104] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0078.104] GetProcessHeap () returned 0x3150000 [0078.104] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.104] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0078.104] GetProcessHeap () returned 0x3150000 [0078.104] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.104] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.105] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.105] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0078.105] GetProcessHeap () returned 0x3150000 [0078.105] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0078.105] GetProcessHeap () returned 0x3150000 [0078.105] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.105] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.105] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.105] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0078.105] GetProcessHeap () returned 0x3150000 [0078.105] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.105] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0078.106] GetProcessHeap () returned 0x3150000 [0078.106] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0078.106] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x117d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x117d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.106] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0078.106] GetProcessHeap () returned 0x3150000 [0078.106] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.106] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0078.106] GetProcessHeap () returned 0x3150000 [0078.106] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.106] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0078.107] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.107] FindClose (in: hFindFile=0x57d22b8 | out: hFindFile=0x57d22b8) returned 1 [0078.107] GetProcessHeap () returned 0x3150000 [0078.107] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.107] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0078.107] GetProcessHeap () returned 0x3150000 [0078.107] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.107] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.108] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.108] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.108] GetProcessHeap () returned 0x3150000 [0078.108] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0078.108] GetProcessHeap () returned 0x3150000 [0078.108] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.108] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-sl\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.108] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.108] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.109] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0078.109] GetProcessHeap () returned 0x3150000 [0078.109] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.109] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0078.109] GetProcessHeap () returned 0x3150000 [0078.109] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.109] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.109] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.109] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.109] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.109] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0078.109] GetProcessHeap () returned 0x3150000 [0078.109] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.109] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0078.110] GetProcessHeap () returned 0x3150000 [0078.110] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.110] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.110] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.110] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.110] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0078.110] GetProcessHeap () returned 0x3150000 [0078.110] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.110] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.110] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0078.110] GetProcessHeap () returned 0x3150000 [0078.110] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.110] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.111] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.111] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0078.111] GetProcessHeap () returned 0x3150000 [0078.111] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0078.111] GetProcessHeap () returned 0x3150000 [0078.111] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.111] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.111] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.111] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.111] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.111] GetProcessHeap () returned 0x3150000 [0078.111] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0078.112] GetProcessHeap () returned 0x3150000 [0078.112] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.112] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.112] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd82, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd82, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.112] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0078.112] GetProcessHeap () returned 0x3150000 [0078.112] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.112] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0078.112] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0078.113] GetProcessHeap () returned 0x3150000 [0078.113] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.114] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0078.114] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.114] GetProcessHeap () returned 0x3150000 [0078.114] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.114] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0078.115] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0078.115] GetProcessHeap () returned 0x3150000 [0078.115] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0078.115] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api", cAlternateFileName="")) returned 1 [0078.115] GetProcessHeap () returned 0x3150000 [0078.115] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.115] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0078.116] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.116] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0078.116] GetProcessHeap () returned 0x3150000 [0078.116] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.116] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.116] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.116] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x100e, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api.js", cAlternateFileName="")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x100e, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api.js", cAlternateFileName="")) returned 0 [0078.117] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.117] GetProcessHeap () returned 0x3150000 [0078.117] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0078.117] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0078.117] GetProcessHeap () returned 0x3150000 [0078.117] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="config.js", cAlternateFileName="")) returned 1 [0078.117] FindNextFileW (in: hFindFile=0x57d2178, lpFindFileData=0x53ee3d8 | out: lpFindFileData=0x53ee3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="core", cAlternateFileName="")) returned 1 [0078.117] GetProcessHeap () returned 0x3150000 [0078.117] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57eac40 [0078.117] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.118] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.118] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0078.118] GetProcessHeap () returned 0x3150000 [0078.118] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0078.118] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.118] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0078.118] GetProcessHeap () returned 0x3150000 [0078.118] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0078.118] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.119] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.119] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0078.119] GetProcessHeap () returned 0x3150000 [0078.119] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.120] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ar-ae\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.121] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.121] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0078.121] GetProcessHeap () returned 0x3150000 [0078.121] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.121] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0078.121] GetProcessHeap () returned 0x3150000 [0078.121] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.121] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.122] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.122] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0078.122] GetProcessHeap () returned 0x3150000 [0078.122] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.122] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0078.122] GetProcessHeap () returned 0x3150000 [0078.122] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.122] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.123] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.123] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0078.123] GetProcessHeap () returned 0x3150000 [0078.123] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0078.123] GetProcessHeap () returned 0x3150000 [0078.123] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.123] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0078.123] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.123] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0078.123] GetProcessHeap () returned 0x3150000 [0078.123] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.123] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0078.123] GetProcessHeap () returned 0x3150000 [0078.124] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.124] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.124] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0078.124] GetProcessHeap () returned 0x3150000 [0078.124] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.124] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0078.124] GetProcessHeap () returned 0x3150000 [0078.124] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.124] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.125] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.125] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.125] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.125] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0078.125] GetProcessHeap () returned 0x3150000 [0078.125] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.125] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0078.125] GetProcessHeap () returned 0x3150000 [0078.125] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.125] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0078.126] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.126] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x315b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.126] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x315b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.126] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0078.127] GetProcessHeap () returned 0x3150000 [0078.127] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.127] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0078.127] GetProcessHeap () returned 0x3150000 [0078.127] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.127] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.127] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.127] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.127] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.127] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0078.127] GetProcessHeap () returned 0x3150000 [0078.127] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.127] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0078.128] GetProcessHeap () returned 0x3150000 [0078.128] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0078.128] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.128] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.128] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.128] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0078.128] GetProcessHeap () returned 0x3150000 [0078.128] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.128] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0078.128] GetProcessHeap () returned 0x3150000 [0078.128] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.128] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.129] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.129] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.129] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.129] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0078.129] GetProcessHeap () returned 0x3150000 [0078.129] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.129] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0078.129] GetProcessHeap () returned 0x3150000 [0078.129] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.129] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.130] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.130] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.130] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.130] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0078.130] GetProcessHeap () returned 0x3150000 [0078.130] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.130] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0078.130] GetProcessHeap () returned 0x3150000 [0078.130] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.130] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.131] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.131] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.131] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.131] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0078.131] GetProcessHeap () returned 0x3150000 [0078.131] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.131] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0078.131] GetProcessHeap () returned 0x3150000 [0078.131] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.131] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0078.132] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.132] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.132] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.132] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0078.132] GetProcessHeap () returned 0x3150000 [0078.132] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.132] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0078.132] GetProcessHeap () returned 0x3150000 [0078.132] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.132] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\he-il\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d38 [0078.133] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.133] FindNextFileW (in: hFindFile=0x57d1d38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.133] FindClose (in: hFindFile=0x57d1d38 | out: hFindFile=0x57d1d38) returned 1 [0078.133] GetProcessHeap () returned 0x3150000 [0078.133] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.133] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0078.133] GetProcessHeap () returned 0x3150000 [0078.133] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.133] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.133] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.133] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.133] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.133] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0078.134] GetProcessHeap () returned 0x3150000 [0078.134] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.134] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0078.134] GetProcessHeap () returned 0x3150000 [0078.134] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.134] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.134] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.134] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.134] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.134] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0078.135] GetProcessHeap () returned 0x3150000 [0078.135] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.135] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0078.135] GetProcessHeap () returned 0x3150000 [0078.135] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.135] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0078.135] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.135] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.135] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.135] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0078.139] GetProcessHeap () returned 0x3150000 [0078.139] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.139] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0078.139] GetProcessHeap () returned 0x3150000 [0078.139] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.139] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.139] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4830, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.139] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4830, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.139] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0078.139] GetProcessHeap () returned 0x3150000 [0078.139] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.139] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0078.139] GetProcessHeap () returned 0x3150000 [0078.139] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.139] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0078.142] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.142] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.142] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.142] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0078.142] GetProcessHeap () returned 0x3150000 [0078.142] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.142] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0078.142] GetProcessHeap () returned 0x3150000 [0078.142] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.142] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.142] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.142] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.142] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0078.142] GetProcessHeap () returned 0x3150000 [0078.142] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.142] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0078.142] GetProcessHeap () returned 0x3150000 [0078.142] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.143] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.143] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e09, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.143] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e09, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.143] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0078.143] GetProcessHeap () returned 0x3150000 [0078.143] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.143] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0078.143] GetProcessHeap () returned 0x3150000 [0078.143] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5ba0060 [0078.143] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.143] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.143] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e51, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.143] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e51, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.143] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0078.161] GetProcessHeap () returned 0x3150000 [0078.161] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5ba0060 | out: hHeap=0x3150000) returned 1 [0078.161] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0078.166] GetProcessHeap () returned 0x3150000 [0078.167] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.167] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.167] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.167] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.167] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.167] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0078.167] GetProcessHeap () returned 0x3150000 [0078.168] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.168] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0078.168] GetProcessHeap () returned 0x3150000 [0078.168] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.168] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.172] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.173] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.176] GetProcessHeap () returned 0x3150000 [0078.176] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.176] GetProcessHeap () returned 0x3150000 [0078.176] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0078.177] GetProcessHeap () returned 0x3150000 [0078.177] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.177] GetProcessHeap () returned 0x3150000 [0078.177] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.177] GetProcessHeap () returned 0x3150000 [0078.177] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.177] GetProcessHeap () returned 0x3150000 [0078.177] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.178] GetProcessHeap () returned 0x3150000 [0078.178] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.178] GetProcessHeap () returned 0x3150000 [0078.178] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.178] GetProcessHeap () returned 0x3150000 [0078.178] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.179] GetProcessHeap () returned 0x3150000 [0078.179] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-sl\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.179] GetProcessHeap () returned 0x3150000 [0078.179] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.179] GetProcessHeap () returned 0x3150000 [0078.179] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.179] GetProcessHeap () returned 0x3150000 [0078.179] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.179] GetProcessHeap () returned 0x3150000 [0078.179] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.179] GetProcessHeap () returned 0x3150000 [0078.179] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.179] GetProcessHeap () returned 0x3150000 [0078.179] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.180] GetProcessHeap () returned 0x3150000 [0078.180] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.180] GetProcessHeap () returned 0x3150000 [0078.180] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.180] GetProcessHeap () returned 0x3150000 [0078.180] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.180] GetProcessHeap () returned 0x3150000 [0078.180] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.180] GetProcessHeap () returned 0x3150000 [0078.180] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.180] GetProcessHeap () returned 0x3150000 [0078.180] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0078.180] GetProcessHeap () returned 0x3150000 [0078.180] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.181] GetProcessHeap () returned 0x3150000 [0078.181] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57eac40 | out: hHeap=0x3150000) returned 1 [0078.181] GetProcessHeap () returned 0x3150000 [0078.181] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0078.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.183] GetProcessHeap () returned 0x3150000 [0078.183] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.183] GetProcessHeap () returned 0x3150000 [0078.183] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0078.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0078.189] GetProcessHeap () returned 0x3150000 [0078.189] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ar-ae\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.192] GetProcessHeap () returned 0x3150000 [0078.192] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.192] GetProcessHeap () returned 0x3150000 [0078.192] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.192] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.197] GetProcessHeap () returned 0x3150000 [0078.197] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.197] GetProcessHeap () returned 0x3150000 [0078.197] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.197] GetProcessHeap () returned 0x3150000 [0078.197] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.197] GetProcessHeap () returned 0x3150000 [0078.197] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.197] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.198] GetProcessHeap () returned 0x3150000 [0078.198] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.198] GetProcessHeap () returned 0x3150000 [0078.198] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.199] GetProcessHeap () returned 0x3150000 [0078.199] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.199] GetProcessHeap () returned 0x3150000 [0078.199] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.199] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.200] GetProcessHeap () returned 0x3150000 [0078.200] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.200] GetProcessHeap () returned 0x3150000 [0078.200] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.200] GetProcessHeap () returned 0x3150000 [0078.200] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.200] GetProcessHeap () returned 0x3150000 [0078.200] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.201] GetProcessHeap () returned 0x3150000 [0078.201] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.201] GetProcessHeap () returned 0x3150000 [0078.201] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.202] GetProcessHeap () returned 0x3150000 [0078.202] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.202] GetProcessHeap () returned 0x3150000 [0078.202] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.202] GetProcessHeap () returned 0x3150000 [0078.202] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.202] GetProcessHeap () returned 0x3150000 [0078.202] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.202] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.222] GetProcessHeap () returned 0x3150000 [0078.222] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.222] GetProcessHeap () returned 0x3150000 [0078.222] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.222] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.230] GetProcessHeap () returned 0x3150000 [0078.230] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.230] GetProcessHeap () returned 0x3150000 [0078.230] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.230] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.231] GetProcessHeap () returned 0x3150000 [0078.231] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.231] GetProcessHeap () returned 0x3150000 [0078.231] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\he-il\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.231] GetProcessHeap () returned 0x3150000 [0078.231] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.231] GetProcessHeap () returned 0x3150000 [0078.231] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.231] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.232] GetProcessHeap () returned 0x3150000 [0078.232] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.232] GetProcessHeap () returned 0x3150000 [0078.232] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.232] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.233] GetProcessHeap () returned 0x3150000 [0078.233] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.233] GetProcessHeap () returned 0x3150000 [0078.233] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.233] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.234] GetProcessHeap () returned 0x3150000 [0078.234] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.234] GetProcessHeap () returned 0x3150000 [0078.234] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.234] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0078.239] GetProcessHeap () returned 0x3150000 [0078.239] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.239] GetProcessHeap () returned 0x3150000 [0078.239] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.246] GetProcessHeap () returned 0x3150000 [0078.246] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.246] GetProcessHeap () returned 0x3150000 [0078.246] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.246] GetProcessHeap () returned 0x3150000 [0078.246] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.246] GetProcessHeap () returned 0x3150000 [0078.246] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.246] GetProcessHeap () returned 0x3150000 [0078.246] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.246] GetProcessHeap () returned 0x3150000 [0078.246] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.247] GetProcessHeap () returned 0x3150000 [0078.247] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.247] GetProcessHeap () returned 0x3150000 [0078.247] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.247] GetProcessHeap () returned 0x3150000 [0078.247] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.247] GetProcessHeap () returned 0x3150000 [0078.247] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.248] GetProcessHeap () returned 0x3150000 [0078.248] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.248] GetProcessHeap () returned 0x3150000 [0078.248] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.248] GetProcessHeap () returned 0x3150000 [0078.248] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.248] GetProcessHeap () returned 0x3150000 [0078.248] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.249] GetProcessHeap () returned 0x3150000 [0078.249] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.249] GetProcessHeap () returned 0x3150000 [0078.249] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.250] GetProcessHeap () returned 0x3150000 [0078.250] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.250] GetProcessHeap () returned 0x3150000 [0078.250] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.252] GetProcessHeap () returned 0x3150000 [0078.252] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.252] GetProcessHeap () returned 0x3150000 [0078.252] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-sl\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.252] GetProcessHeap () returned 0x3150000 [0078.252] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.252] GetProcessHeap () returned 0x3150000 [0078.252] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.252] GetProcessHeap () returned 0x3150000 [0078.252] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.252] GetProcessHeap () returned 0x3150000 [0078.252] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.253] GetProcessHeap () returned 0x3150000 [0078.253] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.253] GetProcessHeap () returned 0x3150000 [0078.253] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.253] GetProcessHeap () returned 0x3150000 [0078.253] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.253] GetProcessHeap () returned 0x3150000 [0078.253] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.254] GetProcessHeap () returned 0x3150000 [0078.254] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.254] GetProcessHeap () returned 0x3150000 [0078.254] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.254] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.254] GetProcessHeap () returned 0x3150000 [0078.254] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.254] GetProcessHeap () returned 0x3150000 [0078.254] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0078.255] GetProcessHeap () returned 0x3150000 [0078.255] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.256] GetProcessHeap () returned 0x3150000 [0078.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0078.256] GetProcessHeap () returned 0x3150000 [0078.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0078.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.256] GetProcessHeap () returned 0x3150000 [0078.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.256] GetProcessHeap () returned 0x3150000 [0078.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0078.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.257] GetProcessHeap () returned 0x3150000 [0078.257] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0078.257] GetProcessHeap () returned 0x3150000 [0078.257] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.257] GetProcessHeap () returned 0x3150000 [0078.257] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0078.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0078.258] GetProcessHeap () returned 0x3150000 [0078.258] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0078.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.258] GetProcessHeap () returned 0x3150000 [0078.258] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0078.258] GetProcessHeap () returned 0x3150000 [0078.258] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0078.258] GetProcessHeap () returned 0x3150000 [0078.258] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0078.259] GetProcessHeap () returned 0x3150000 [0078.259] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0078.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.260] GetProcessHeap () returned 0x3150000 [0078.260] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5b90058 | out: hHeap=0x3150000) returned 1 [0078.260] GetProcessHeap () returned 0x3150000 [0078.260] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5b90058 [0078.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\*", lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22b8 [0078.275] GetProcessHeap () returned 0x3150000 [0078.275] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0078.276] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.277] GetProcessHeap () returned 0x3150000 [0078.277] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.278] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.278] GetProcessHeap () returned 0x3150000 [0078.278] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.278] GetProcessHeap () returned 0x3150000 [0078.278] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.279] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.280] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.280] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0078.280] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0078.280] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0078.280] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0078.280] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0078.280] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0078.280] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0078.280] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0078.280] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0078.281] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0078.281] GetProcessHeap () returned 0x3150000 [0078.281] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0078.281] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.281] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.281] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0078.281] GetProcessHeap () returned 0x3150000 [0078.281] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.282] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.284] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.284] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0078.284] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0078.284] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0078.284] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0078.284] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0078.284] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0078.284] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0078.284] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0078.284] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0078.284] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 0 [0078.284] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0078.285] GetProcessHeap () returned 0x3150000 [0078.285] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.285] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0078.285] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.285] GetProcessHeap () returned 0x3150000 [0078.285] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0078.285] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0078.285] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0078.286] GetProcessHeap () returned 0x3150000 [0078.286] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.286] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0078.286] GetProcessHeap () returned 0x3150000 [0078.286] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.286] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.286] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.286] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0078.286] GetProcessHeap () returned 0x3150000 [0078.286] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0078.287] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.288] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.288] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0078.288] GetProcessHeap () returned 0x3150000 [0078.288] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.288] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.289] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.289] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.289] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0078.289] GetProcessHeap () returned 0x3150000 [0078.289] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.289] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0078.289] GetProcessHeap () returned 0x3150000 [0078.289] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.289] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.289] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.290] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x78b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.290] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x78b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.290] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0078.290] GetProcessHeap () returned 0x3150000 [0078.290] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.290] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0078.290] GetProcessHeap () returned 0x3150000 [0078.290] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.290] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.290] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.290] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.290] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.290] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0078.290] GetProcessHeap () returned 0x3150000 [0078.290] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.290] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0078.290] GetProcessHeap () returned 0x3150000 [0078.290] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.291] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.291] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.291] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.291] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0078.291] GetProcessHeap () returned 0x3150000 [0078.291] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.291] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0078.291] GetProcessHeap () returned 0x3150000 [0078.291] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.291] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.292] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.292] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x792, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.292] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x792, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.292] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0078.292] GetProcessHeap () returned 0x3150000 [0078.292] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.292] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0078.292] GetProcessHeap () returned 0x3150000 [0078.292] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.292] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.293] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.293] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.293] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.293] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0078.293] GetProcessHeap () returned 0x3150000 [0078.293] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.293] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0078.293] GetProcessHeap () returned 0x3150000 [0078.293] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.293] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.294] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.294] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.294] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.294] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.294] GetProcessHeap () returned 0x3150000 [0078.294] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.294] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0078.294] GetProcessHeap () returned 0x3150000 [0078.294] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.294] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.295] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.295] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.295] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.295] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.295] GetProcessHeap () returned 0x3150000 [0078.295] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.295] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0078.295] GetProcessHeap () returned 0x3150000 [0078.295] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.295] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.296] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.296] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.296] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.296] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0078.296] GetProcessHeap () returned 0x3150000 [0078.296] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.296] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0078.296] GetProcessHeap () returned 0x3150000 [0078.296] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.296] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.296] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.296] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x70e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.296] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x70e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.296] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0078.296] GetProcessHeap () returned 0x3150000 [0078.297] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.297] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0078.297] GetProcessHeap () returned 0x3150000 [0078.297] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.297] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.297] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x729, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.297] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x729, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.297] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0078.297] GetProcessHeap () returned 0x3150000 [0078.297] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.297] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0078.297] GetProcessHeap () returned 0x3150000 [0078.297] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.298] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.298] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.298] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.298] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0078.298] GetProcessHeap () returned 0x3150000 [0078.298] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.298] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0078.299] GetProcessHeap () returned 0x3150000 [0078.299] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.299] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.299] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.299] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.299] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0078.299] GetProcessHeap () returned 0x3150000 [0078.299] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.299] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0078.299] GetProcessHeap () returned 0x3150000 [0078.299] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.299] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.299] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.299] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.300] GetProcessHeap () returned 0x3150000 [0078.300] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.300] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0078.300] GetProcessHeap () returned 0x3150000 [0078.300] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.300] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.301] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.301] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.301] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.301] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.301] GetProcessHeap () returned 0x3150000 [0078.301] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.301] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0078.301] GetProcessHeap () returned 0x3150000 [0078.301] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.302] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.302] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x771, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.302] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x771, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.302] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0078.302] GetProcessHeap () returned 0x3150000 [0078.302] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.302] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0078.302] GetProcessHeap () returned 0x3150000 [0078.302] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.303] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.303] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.303] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.303] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.303] GetProcessHeap () returned 0x3150000 [0078.303] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.303] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0078.303] GetProcessHeap () returned 0x3150000 [0078.303] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.304] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.304] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.304] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.304] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0078.304] GetProcessHeap () returned 0x3150000 [0078.304] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.304] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0078.304] GetProcessHeap () returned 0x3150000 [0078.304] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.304] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.304] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.305] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.305] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0078.305] GetProcessHeap () returned 0x3150000 [0078.305] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.305] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0078.305] GetProcessHeap () returned 0x3150000 [0078.305] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.305] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.305] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.306] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.306] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0078.306] GetProcessHeap () returned 0x3150000 [0078.306] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.306] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0078.306] GetProcessHeap () returned 0x3150000 [0078.306] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.306] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.306] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.306] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.306] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0078.306] GetProcessHeap () returned 0x3150000 [0078.306] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.306] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0078.307] GetProcessHeap () returned 0x3150000 [0078.307] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0078.307] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.307] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.307] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.307] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0078.307] GetProcessHeap () returned 0x3150000 [0078.307] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.307] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0078.307] GetProcessHeap () returned 0x3150000 [0078.308] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.308] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.308] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.308] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.308] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0078.308] GetProcessHeap () returned 0x3150000 [0078.308] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.308] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0078.308] GetProcessHeap () returned 0x3150000 [0078.308] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.308] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.308] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.308] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.309] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.309] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0078.309] GetProcessHeap () returned 0x3150000 [0078.309] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.309] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0078.309] GetProcessHeap () returned 0x3150000 [0078.309] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.309] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.309] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.309] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.309] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0078.309] GetProcessHeap () returned 0x3150000 [0078.309] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.309] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0078.309] GetProcessHeap () returned 0x3150000 [0078.309] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.433] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.433] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x97b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.439] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x97b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.439] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0078.439] GetProcessHeap () returned 0x3150000 [0078.439] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.439] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0078.443] GetProcessHeap () returned 0x3150000 [0078.444] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.444] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0078.445] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.445] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.445] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.445] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0078.450] GetProcessHeap () returned 0x3150000 [0078.450] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.450] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0078.450] GetProcessHeap () returned 0x3150000 [0078.450] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.450] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.450] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.450] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.450] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.450] GetProcessHeap () returned 0x3150000 [0078.450] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.450] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0078.450] GetProcessHeap () returned 0x3150000 [0078.450] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.450] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.450] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.451] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0078.451] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.451] GetProcessHeap () returned 0x3150000 [0078.451] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.451] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0078.451] GetProcessHeap () returned 0x3150000 [0078.451] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.451] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.451] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.451] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.451] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.451] GetProcessHeap () returned 0x3150000 [0078.451] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.451] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0078.451] GetProcessHeap () returned 0x3150000 [0078.451] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.451] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.452] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.452] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.452] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.452] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.452] GetProcessHeap () returned 0x3150000 [0078.452] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.452] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.452] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0078.452] GetProcessHeap () returned 0x3150000 [0078.452] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.452] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.452] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.452] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.453] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.453] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.453] GetProcessHeap () returned 0x3150000 [0078.453] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.453] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0078.453] GetProcessHeap () returned 0x3150000 [0078.453] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.453] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.453] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.453] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.453] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.453] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.454] GetProcessHeap () returned 0x3150000 [0078.454] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.454] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0078.454] GetProcessHeap () returned 0x3150000 [0078.454] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.454] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.454] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.454] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.454] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.455] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0078.455] GetProcessHeap () returned 0x3150000 [0078.455] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.455] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0078.455] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.455] GetProcessHeap () returned 0x3150000 [0078.455] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0078.455] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9838, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0078.455] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0078.455] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0078.455] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0078.455] GetProcessHeap () returned 0x3150000 [0078.455] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.456] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0078.456] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0078.456] GetProcessHeap () returned 0x3150000 [0078.456] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0078.456] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="add-account-select", cAlternateFileName="ADD-AC~2")) returned 1 [0078.456] GetProcessHeap () returned 0x3150000 [0078.456] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0078.456] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.473] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.473] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0078.473] GetProcessHeap () returned 0x3150000 [0078.473] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.475] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.475] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0078.475] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0078.475] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.475] GetProcessHeap () returned 0x3150000 [0078.475] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.475] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0078.475] GetProcessHeap () returned 0x3150000 [0078.475] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.476] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.476] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0078.476] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 0 [0078.476] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.476] GetProcessHeap () returned 0x3150000 [0078.476] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.476] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0078.476] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0078.477] GetProcessHeap () returned 0x3150000 [0078.477] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0078.477] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aicuc", cAlternateFileName="")) returned 1 [0078.477] GetProcessHeap () returned 0x3150000 [0078.477] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0078.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.485] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.485] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0078.485] GetProcessHeap () returned 0x3150000 [0078.485] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.491] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.491] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x18813, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0078.491] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x813, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-selectors.css", cAlternateFileName="PLUGIN~1.CSS")) returned 1 [0078.491] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x813, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-selectors.css", cAlternateFileName="PLUGIN~1.CSS")) returned 0 [0078.491] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0078.491] GetProcessHeap () returned 0x3150000 [0078.491] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.491] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0078.491] GetProcessHeap () returned 0x3150000 [0078.491] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.491] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.493] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.493] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0078.493] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0078.493] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0078.493] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0078.493] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0078.493] GetProcessHeap () returned 0x3150000 [0078.493] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0078.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.638] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.638] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0078.638] GetProcessHeap () returned 0x3150000 [0078.638] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.638] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.640] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.640] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdae26b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0078.640] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdae26b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdae26b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0078.640] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0078.640] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0078.640] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.png", cAlternateFileName="")) returned 1 [0078.640] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 1 [0078.640] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 0 [0078.640] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0078.641] GetProcessHeap () returned 0x3150000 [0078.641] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.641] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0078.641] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0078.641] GetProcessHeap () returned 0x3150000 [0078.641] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0078.641] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.png", cAlternateFileName="")) returned 1 [0078.641] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 1 [0078.641] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 0 [0078.641] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0078.642] GetProcessHeap () returned 0x3150000 [0078.642] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.642] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0078.642] GetProcessHeap () returned 0x3150000 [0078.642] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.642] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.642] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.642] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0078.643] GetProcessHeap () returned 0x3150000 [0078.643] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0078.643] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.645] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.645] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0078.645] GetProcessHeap () returned 0x3150000 [0078.645] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.645] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.645] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.645] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.645] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.645] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0078.646] GetProcessHeap () returned 0x3150000 [0078.646] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.646] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0078.646] GetProcessHeap () returned 0x3150000 [0078.646] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.646] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.646] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.646] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.646] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.647] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0078.647] GetProcessHeap () returned 0x3150000 [0078.647] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0078.647] GetProcessHeap () returned 0x3150000 [0078.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.647] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa3e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa3e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.647] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0078.647] GetProcessHeap () returned 0x3150000 [0078.647] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.647] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0078.647] GetProcessHeap () returned 0x3150000 [0078.647] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.647] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.648] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.648] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.648] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.648] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0078.648] GetProcessHeap () returned 0x3150000 [0078.648] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.648] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0078.648] GetProcessHeap () returned 0x3150000 [0078.648] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.648] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.649] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.649] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.649] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.649] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0078.649] GetProcessHeap () returned 0x3150000 [0078.649] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.649] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0078.649] GetProcessHeap () returned 0x3150000 [0078.649] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.649] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.650] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.650] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.650] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.650] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0078.650] GetProcessHeap () returned 0x3150000 [0078.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.650] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0078.650] GetProcessHeap () returned 0x3150000 [0078.650] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.650] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.650] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.650] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xba21, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.650] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xba21, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.650] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0078.650] GetProcessHeap () returned 0x3150000 [0078.650] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.650] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0078.651] GetProcessHeap () returned 0x3150000 [0078.651] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.651] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.651] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.651] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xda52, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.651] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xda52, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.651] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0078.651] GetProcessHeap () returned 0x3150000 [0078.651] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.652] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0078.652] GetProcessHeap () returned 0x3150000 [0078.652] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.652] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.652] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0078.652] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0078.652] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0078.652] GetProcessHeap () returned 0x3150000 [0078.652] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.652] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0078.652] GetProcessHeap () returned 0x3150000 [0078.652] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.652] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0078.654] GetProcessHeap () returned 0x3150000 [0078.654] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.654] GetProcessHeap () returned 0x3150000 [0078.654] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.654] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.655] GetProcessHeap () returned 0x3150000 [0078.655] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.655] GetProcessHeap () returned 0x3150000 [0078.655] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.655] GetProcessHeap () returned 0x3150000 [0078.655] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.655] GetProcessHeap () returned 0x3150000 [0078.655] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.655] GetProcessHeap () returned 0x3150000 [0078.655] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.655] GetProcessHeap () returned 0x3150000 [0078.655] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0078.655] GetProcessHeap () returned 0x3150000 [0078.655] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0078.655] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0078.658] GetProcessHeap () returned 0x3150000 [0078.658] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.658] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.660] GetProcessHeap () returned 0x3150000 [0078.660] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.660] GetProcessHeap () returned 0x3150000 [0078.660] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.660] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.661] GetProcessHeap () returned 0x3150000 [0078.661] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0078.661] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0078.661] GetProcessHeap () returned 0x3150000 [0078.662] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0078.662] GetProcessHeap () returned 0x3150000 [0078.662] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0078.662] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.662] GetProcessHeap () returned 0x3150000 [0078.662] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0078.662] GetProcessHeap () returned 0x3150000 [0078.662] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.662] GetProcessHeap () returned 0x3150000 [0078.662] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0078.662] GetProcessHeap () returned 0x3150000 [0078.662] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.663] GetProcessHeap () returned 0x3150000 [0078.663] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0078.663] GetProcessHeap () returned 0x3150000 [0078.663] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0078.663] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0078.664] GetProcessHeap () returned 0x3150000 [0078.664] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.665] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.666] GetProcessHeap () returned 0x3150000 [0078.666] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.666] GetProcessHeap () returned 0x3150000 [0078.666] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.666] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.668] GetProcessHeap () returned 0x3150000 [0078.668] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0078.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.668] GetProcessHeap () returned 0x3150000 [0078.668] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.668] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.670] GetProcessHeap () returned 0x3150000 [0078.670] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.670] GetProcessHeap () returned 0x3150000 [0078.670] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0078.670] GetProcessHeap () returned 0x3150000 [0078.670] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.670] GetProcessHeap () returned 0x3150000 [0078.670] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.670] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.671] GetProcessHeap () returned 0x3150000 [0078.671] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0078.671] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.673] GetProcessHeap () returned 0x3150000 [0078.673] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.673] GetProcessHeap () returned 0x3150000 [0078.673] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.673] GetProcessHeap () returned 0x3150000 [0078.673] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.673] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0078.674] GetProcessHeap () returned 0x3150000 [0078.674] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.674] GetProcessHeap () returned 0x3150000 [0078.674] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.674] GetProcessHeap () returned 0x3150000 [0078.674] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.674] GetProcessHeap () returned 0x3150000 [0078.674] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.674] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.675] GetProcessHeap () returned 0x3150000 [0078.675] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.675] GetProcessHeap () returned 0x3150000 [0078.675] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.675] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.922] GetProcessHeap () returned 0x3150000 [0078.922] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.923] GetProcessHeap () returned 0x3150000 [0078.923] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.928] GetProcessHeap () returned 0x3150000 [0078.928] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.928] GetProcessHeap () returned 0x3150000 [0078.928] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.928] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.929] GetProcessHeap () returned 0x3150000 [0078.929] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.929] GetProcessHeap () returned 0x3150000 [0078.929] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.929] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.932] GetProcessHeap () returned 0x3150000 [0078.932] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.932] GetProcessHeap () returned 0x3150000 [0078.932] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.933] GetProcessHeap () returned 0x3150000 [0078.933] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.933] GetProcessHeap () returned 0x3150000 [0078.933] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.933] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0078.938] GetProcessHeap () returned 0x3150000 [0078.938] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.938] GetProcessHeap () returned 0x3150000 [0078.938] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.938] GetProcessHeap () returned 0x3150000 [0078.938] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.938] GetProcessHeap () returned 0x3150000 [0078.938] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.938] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.939] GetProcessHeap () returned 0x3150000 [0078.940] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.940] GetProcessHeap () returned 0x3150000 [0078.940] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.940] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.941] GetProcessHeap () returned 0x3150000 [0078.941] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.941] GetProcessHeap () returned 0x3150000 [0078.941] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.941] GetProcessHeap () returned 0x3150000 [0078.941] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.941] GetProcessHeap () returned 0x3150000 [0078.941] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.941] GetProcessHeap () returned 0x3150000 [0078.941] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.941] GetProcessHeap () returned 0x3150000 [0078.941] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.941] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.942] GetProcessHeap () returned 0x3150000 [0078.942] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.942] GetProcessHeap () returned 0x3150000 [0078.942] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.942] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.943] GetProcessHeap () returned 0x3150000 [0078.943] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.943] GetProcessHeap () returned 0x3150000 [0078.943] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.943] GetProcessHeap () returned 0x3150000 [0078.943] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.943] GetProcessHeap () returned 0x3150000 [0078.943] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.943] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.984] GetProcessHeap () returned 0x3150000 [0078.984] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.984] GetProcessHeap () returned 0x3150000 [0078.984] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.986] GetProcessHeap () returned 0x3150000 [0078.986] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.986] GetProcessHeap () returned 0x3150000 [0078.986] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.986] GetProcessHeap () returned 0x3150000 [0078.986] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.986] GetProcessHeap () returned 0x3150000 [0078.986] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.986] GetProcessHeap () returned 0x3150000 [0078.986] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.986] GetProcessHeap () returned 0x3150000 [0078.986] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.987] GetProcessHeap () returned 0x3150000 [0078.987] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.987] GetProcessHeap () returned 0x3150000 [0078.987] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.988] GetProcessHeap () returned 0x3150000 [0078.988] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.988] GetProcessHeap () returned 0x3150000 [0078.988] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0078.988] GetProcessHeap () returned 0x3150000 [0078.988] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.988] GetProcessHeap () returned 0x3150000 [0078.988] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.988] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.989] GetProcessHeap () returned 0x3150000 [0078.989] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.989] GetProcessHeap () returned 0x3150000 [0078.989] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.989] GetProcessHeap () returned 0x3150000 [0078.989] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.989] GetProcessHeap () returned 0x3150000 [0078.989] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.989] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0078.990] GetProcessHeap () returned 0x3150000 [0078.990] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.990] GetProcessHeap () returned 0x3150000 [0078.990] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.990] GetProcessHeap () returned 0x3150000 [0078.990] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.990] GetProcessHeap () returned 0x3150000 [0078.990] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.990] GetProcessHeap () returned 0x3150000 [0078.990] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.990] GetProcessHeap () returned 0x3150000 [0078.990] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.990] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0078.991] GetProcessHeap () returned 0x3150000 [0078.991] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.991] GetProcessHeap () returned 0x3150000 [0078.991] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.991] GetProcessHeap () returned 0x3150000 [0078.991] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.991] GetProcessHeap () returned 0x3150000 [0078.991] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.991] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0078.992] GetProcessHeap () returned 0x3150000 [0078.992] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.992] GetProcessHeap () returned 0x3150000 [0078.992] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.992] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.993] GetProcessHeap () returned 0x3150000 [0078.993] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.993] GetProcessHeap () returned 0x3150000 [0078.993] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0078.993] GetProcessHeap () returned 0x3150000 [0078.993] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0078.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0078.993] GetProcessHeap () returned 0x3150000 [0078.993] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.993] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.994] GetProcessHeap () returned 0x3150000 [0078.994] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0078.994] GetProcessHeap () returned 0x3150000 [0078.994] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0078.994] GetProcessHeap () returned 0x3150000 [0078.994] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.995] GetProcessHeap () returned 0x3150000 [0078.995] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0078.995] GetProcessHeap () returned 0x3150000 [0078.995] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0078.995] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0078.995] GetProcessHeap () returned 0x3150000 [0078.995] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.996] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0078.997] GetProcessHeap () returned 0x3150000 [0078.997] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0078.997] GetProcessHeap () returned 0x3150000 [0078.997] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0078.997] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0078.998] GetProcessHeap () returned 0x3150000 [0078.998] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0078.998] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0078.999] GetProcessHeap () returned 0x3150000 [0078.999] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0078.999] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0079.001] GetProcessHeap () returned 0x3150000 [0079.001] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.001] GetProcessHeap () returned 0x3150000 [0079.001] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0079.001] GetProcessHeap () returned 0x3150000 [0079.001] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.001] GetProcessHeap () returned 0x3150000 [0079.001] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.001] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0079.002] GetProcessHeap () returned 0x3150000 [0079.002] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0079.002] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.003] GetProcessHeap () returned 0x3150000 [0079.003] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.003] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.004] GetProcessHeap () returned 0x3150000 [0079.004] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.004] GetProcessHeap () returned 0x3150000 [0079.004] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.005] GetProcessHeap () returned 0x3150000 [0079.005] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.005] GetProcessHeap () returned 0x3150000 [0079.005] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.005] GetProcessHeap () returned 0x3150000 [0079.005] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.005] GetProcessHeap () returned 0x3150000 [0079.005] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.006] GetProcessHeap () returned 0x3150000 [0079.006] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.006] GetProcessHeap () returned 0x3150000 [0079.006] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.006] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.006] GetProcessHeap () returned 0x3150000 [0079.006] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.006] GetProcessHeap () returned 0x3150000 [0079.006] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.006] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0079.007] GetProcessHeap () returned 0x3150000 [0079.007] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.007] GetProcessHeap () returned 0x3150000 [0079.007] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.007] GetProcessHeap () returned 0x3150000 [0079.007] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.007] GetProcessHeap () returned 0x3150000 [0079.007] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.008] GetProcessHeap () returned 0x3150000 [0079.008] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.008] GetProcessHeap () returned 0x3150000 [0079.008] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.008] GetProcessHeap () returned 0x3150000 [0079.008] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.008] GetProcessHeap () returned 0x3150000 [0079.008] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.009] GetProcessHeap () returned 0x3150000 [0079.009] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.009] GetProcessHeap () returned 0x3150000 [0079.009] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.010] GetProcessHeap () returned 0x3150000 [0079.010] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.010] GetProcessHeap () returned 0x3150000 [0079.010] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.010] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0079.010] GetProcessHeap () returned 0x3150000 [0079.011] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.011] GetProcessHeap () returned 0x3150000 [0079.011] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0079.011] GetProcessHeap () returned 0x3150000 [0079.011] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.011] GetProcessHeap () returned 0x3150000 [0079.011] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.012] GetProcessHeap () returned 0x3150000 [0079.012] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.012] GetProcessHeap () returned 0x3150000 [0079.012] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.012] GetProcessHeap () returned 0x3150000 [0079.012] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.012] GetProcessHeap () returned 0x3150000 [0079.012] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0079.013] GetProcessHeap () returned 0x3150000 [0079.013] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.013] GetProcessHeap () returned 0x3150000 [0079.013] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.013] GetProcessHeap () returned 0x3150000 [0079.013] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.013] GetProcessHeap () returned 0x3150000 [0079.013] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.013] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.014] GetProcessHeap () returned 0x3150000 [0079.014] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.014] GetProcessHeap () returned 0x3150000 [0079.014] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0079.014] GetProcessHeap () returned 0x3150000 [0079.014] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.014] GetProcessHeap () returned 0x3150000 [0079.014] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.297] GetProcessHeap () returned 0x3150000 [0079.297] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.297] GetProcessHeap () returned 0x3150000 [0079.297] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.297] GetProcessHeap () returned 0x3150000 [0079.297] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.297] GetProcessHeap () returned 0x3150000 [0079.297] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.297] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.298] GetProcessHeap () returned 0x3150000 [0079.298] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.298] GetProcessHeap () returned 0x3150000 [0079.298] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.298] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0079.299] GetProcessHeap () returned 0x3150000 [0079.299] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.299] GetProcessHeap () returned 0x3150000 [0079.299] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.299] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0079.301] GetProcessHeap () returned 0x3150000 [0079.301] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.301] GetProcessHeap () returned 0x3150000 [0079.301] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0079.301] GetProcessHeap () returned 0x3150000 [0079.301] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.301] GetProcessHeap () returned 0x3150000 [0079.301] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.301] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.302] GetProcessHeap () returned 0x3150000 [0079.302] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.302] GetProcessHeap () returned 0x3150000 [0079.302] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.302] GetProcessHeap () returned 0x3150000 [0079.302] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.302] GetProcessHeap () returned 0x3150000 [0079.302] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.302] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.303] GetProcessHeap () returned 0x3150000 [0079.303] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.303] GetProcessHeap () returned 0x3150000 [0079.303] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.303] GetProcessHeap () returned 0x3150000 [0079.303] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.303] GetProcessHeap () returned 0x3150000 [0079.303] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.303] GetProcessHeap () returned 0x3150000 [0079.303] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.303] GetProcessHeap () returned 0x3150000 [0079.303] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.303] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.304] GetProcessHeap () returned 0x3150000 [0079.304] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.304] GetProcessHeap () returned 0x3150000 [0079.304] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0079.304] GetProcessHeap () returned 0x3150000 [0079.304] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.304] GetProcessHeap () returned 0x3150000 [0079.304] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.304] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.304] GetProcessHeap () returned 0x3150000 [0079.304] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.304] GetProcessHeap () returned 0x3150000 [0079.305] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.305] GetProcessHeap () returned 0x3150000 [0079.305] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.305] GetProcessHeap () returned 0x3150000 [0079.305] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0079.305] GetProcessHeap () returned 0x3150000 [0079.305] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0079.305] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugins\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.306] GetProcessHeap () returned 0x3150000 [0079.306] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.306] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\plugins\\rhp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.306] GetProcessHeap () returned 0x3150000 [0079.306] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.306] GetProcessHeap () returned 0x3150000 [0079.306] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0079.306] GetProcessHeap () returned 0x3150000 [0079.306] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.307] GetProcessHeap () returned 0x3150000 [0079.307] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0079.307] GetProcessHeap () returned 0x3150000 [0079.307] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0079.307] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\dc-annotations\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.308] GetProcessHeap () returned 0x3150000 [0079.308] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.309] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\dc-annotations\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.310] GetProcessHeap () returned 0x3150000 [0079.310] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.310] GetProcessHeap () returned 0x3150000 [0079.310] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.310] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\dc-annotations\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0079.310] GetProcessHeap () returned 0x3150000 [0079.310] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.311] GetProcessHeap () returned 0x3150000 [0079.311] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0079.311] GetProcessHeap () returned 0x3150000 [0079.311] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0079.311] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0079.312] GetProcessHeap () returned 0x3150000 [0079.312] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.312] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.314] GetProcessHeap () returned 0x3150000 [0079.314] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.314] GetProcessHeap () returned 0x3150000 [0079.314] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.314] GetProcessHeap () returned 0x3150000 [0079.314] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0079.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.316] GetProcessHeap () returned 0x3150000 [0079.316] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.316] GetProcessHeap () returned 0x3150000 [0079.316] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.316] GetProcessHeap () returned 0x3150000 [0079.316] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.316] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.317] GetProcessHeap () returned 0x3150000 [0079.317] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.317] GetProcessHeap () returned 0x3150000 [0079.317] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.317] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.318] GetProcessHeap () returned 0x3150000 [0079.318] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.318] GetProcessHeap () returned 0x3150000 [0079.318] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.318] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.318] GetProcessHeap () returned 0x3150000 [0079.318] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.318] GetProcessHeap () returned 0x3150000 [0079.318] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.319] GetProcessHeap () returned 0x3150000 [0079.319] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.319] GetProcessHeap () returned 0x3150000 [0079.319] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.319] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.320] GetProcessHeap () returned 0x3150000 [0079.320] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.320] GetProcessHeap () returned 0x3150000 [0079.320] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.320] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.320] GetProcessHeap () returned 0x3150000 [0079.320] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.320] GetProcessHeap () returned 0x3150000 [0079.320] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.321] GetProcessHeap () returned 0x3150000 [0079.321] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.321] GetProcessHeap () returned 0x3150000 [0079.321] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.321] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.321] GetProcessHeap () returned 0x3150000 [0079.321] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.322] GetProcessHeap () returned 0x3150000 [0079.322] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0079.322] GetProcessHeap () returned 0x3150000 [0079.322] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.322] GetProcessHeap () returned 0x3150000 [0079.322] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.322] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0079.322] GetProcessHeap () returned 0x3150000 [0079.323] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.323] GetProcessHeap () returned 0x3150000 [0079.323] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.323] GetProcessHeap () returned 0x3150000 [0079.323] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.323] GetProcessHeap () returned 0x3150000 [0079.323] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.323] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.324] GetProcessHeap () returned 0x3150000 [0079.324] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.324] GetProcessHeap () returned 0x3150000 [0079.324] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.324] GetProcessHeap () returned 0x3150000 [0079.324] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.324] GetProcessHeap () returned 0x3150000 [0079.324] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.324] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.325] GetProcessHeap () returned 0x3150000 [0079.325] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.325] GetProcessHeap () returned 0x3150000 [0079.325] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.325] GetProcessHeap () returned 0x3150000 [0079.325] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.325] GetProcessHeap () returned 0x3150000 [0079.325] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.325] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0079.326] GetProcessHeap () returned 0x3150000 [0079.326] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.326] GetProcessHeap () returned 0x3150000 [0079.326] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.326] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.326] GetProcessHeap () returned 0x3150000 [0079.327] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.327] GetProcessHeap () returned 0x3150000 [0079.327] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.371] GetProcessHeap () returned 0x3150000 [0079.371] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.371] GetProcessHeap () returned 0x3150000 [0079.371] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.371] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.372] GetProcessHeap () returned 0x3150000 [0079.372] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.372] GetProcessHeap () returned 0x3150000 [0079.372] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.372] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.373] GetProcessHeap () returned 0x3150000 [0079.373] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.373] GetProcessHeap () returned 0x3150000 [0079.373] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.373] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.374] GetProcessHeap () returned 0x3150000 [0079.374] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.374] GetProcessHeap () returned 0x3150000 [0079.374] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.374] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.375] GetProcessHeap () returned 0x3150000 [0079.375] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.375] GetProcessHeap () returned 0x3150000 [0079.375] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.375] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.376] GetProcessHeap () returned 0x3150000 [0079.376] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.376] GetProcessHeap () returned 0x3150000 [0079.376] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.376] GetProcessHeap () returned 0x3150000 [0079.376] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.376] GetProcessHeap () returned 0x3150000 [0079.376] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.376] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0079.377] GetProcessHeap () returned 0x3150000 [0079.377] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.377] GetProcessHeap () returned 0x3150000 [0079.377] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.377] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.378] GetProcessHeap () returned 0x3150000 [0079.378] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.378] GetProcessHeap () returned 0x3150000 [0079.378] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.378] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.379] GetProcessHeap () returned 0x3150000 [0079.379] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.379] GetProcessHeap () returned 0x3150000 [0079.379] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.379] GetProcessHeap () returned 0x3150000 [0079.379] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.379] GetProcessHeap () returned 0x3150000 [0079.379] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.379] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.532] GetProcessHeap () returned 0x3150000 [0079.532] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.532] GetProcessHeap () returned 0x3150000 [0079.532] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.532] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.540] GetProcessHeap () returned 0x3150000 [0079.540] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.540] GetProcessHeap () returned 0x3150000 [0079.540] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.578] GetProcessHeap () returned 0x3150000 [0079.578] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.578] GetProcessHeap () returned 0x3150000 [0079.578] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.578] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.580] GetProcessHeap () returned 0x3150000 [0079.580] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.580] GetProcessHeap () returned 0x3150000 [0079.580] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.580] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.580] GetProcessHeap () returned 0x3150000 [0079.580] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.580] GetProcessHeap () returned 0x3150000 [0079.580] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0079.581] GetProcessHeap () returned 0x3150000 [0079.581] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.582] GetProcessHeap () returned 0x3150000 [0079.582] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0079.582] GetProcessHeap () returned 0x3150000 [0079.582] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0079.582] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0079.582] GetProcessHeap () returned 0x3150000 [0079.582] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.583] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.584] GetProcessHeap () returned 0x3150000 [0079.584] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.584] GetProcessHeap () returned 0x3150000 [0079.584] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0079.584] GetProcessHeap () returned 0x3150000 [0079.584] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.584] GetProcessHeap () returned 0x3150000 [0079.584] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0079.584] GetProcessHeap () returned 0x3150000 [0079.584] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0079.584] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.592] GetProcessHeap () returned 0x3150000 [0079.592] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.592] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.592] GetProcessHeap () returned 0x3150000 [0079.592] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.593] GetProcessHeap () returned 0x3150000 [0079.593] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0079.593] GetProcessHeap () returned 0x3150000 [0079.593] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0079.593] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.594] GetProcessHeap () returned 0x3150000 [0079.594] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.594] GetProcessHeap () returned 0x3150000 [0079.594] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.594] GetProcessHeap () returned 0x3150000 [0079.594] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0079.594] GetProcessHeap () returned 0x3150000 [0079.594] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.594] GetProcessHeap () returned 0x3150000 [0079.594] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0079.595] GetProcessHeap () returned 0x3150000 [0079.595] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0079.595] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0079.597] GetProcessHeap () returned 0x3150000 [0079.597] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.597] GetProcessHeap () returned 0x3150000 [0079.597] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.597] GetProcessHeap () returned 0x3150000 [0079.597] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.597] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0079.598] GetProcessHeap () returned 0x3150000 [0079.598] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.598] GetProcessHeap () returned 0x3150000 [0079.598] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.598] GetProcessHeap () returned 0x3150000 [0079.598] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.598] GetProcessHeap () returned 0x3150000 [0079.598] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.598] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.599] GetProcessHeap () returned 0x3150000 [0079.599] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.599] GetProcessHeap () returned 0x3150000 [0079.599] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.599] GetProcessHeap () returned 0x3150000 [0079.599] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.599] GetProcessHeap () returned 0x3150000 [0079.599] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.599] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.600] GetProcessHeap () returned 0x3150000 [0079.600] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.600] GetProcessHeap () returned 0x3150000 [0079.600] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.600] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.601] GetProcessHeap () returned 0x3150000 [0079.601] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.601] GetProcessHeap () returned 0x3150000 [0079.601] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.601] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.601] GetProcessHeap () returned 0x3150000 [0079.602] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.602] GetProcessHeap () returned 0x3150000 [0079.602] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.602] GetProcessHeap () returned 0x3150000 [0079.602] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.602] GetProcessHeap () returned 0x3150000 [0079.602] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.602] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0079.602] GetProcessHeap () returned 0x3150000 [0079.602] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.603] GetProcessHeap () returned 0x3150000 [0079.603] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.603] GetProcessHeap () returned 0x3150000 [0079.603] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.603] GetProcessHeap () returned 0x3150000 [0079.603] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.603] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.604] GetProcessHeap () returned 0x3150000 [0079.604] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.604] GetProcessHeap () returned 0x3150000 [0079.604] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.604] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.605] GetProcessHeap () returned 0x3150000 [0079.605] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.605] GetProcessHeap () returned 0x3150000 [0079.605] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.605] GetProcessHeap () returned 0x3150000 [0079.605] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.605] GetProcessHeap () returned 0x3150000 [0079.605] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.605] GetProcessHeap () returned 0x3150000 [0079.605] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.605] GetProcessHeap () returned 0x3150000 [0079.605] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.605] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.606] GetProcessHeap () returned 0x3150000 [0079.606] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.606] GetProcessHeap () returned 0x3150000 [0079.606] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.606] GetProcessHeap () returned 0x3150000 [0079.606] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.606] GetProcessHeap () returned 0x3150000 [0079.606] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.606] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.607] GetProcessHeap () returned 0x3150000 [0079.607] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.607] GetProcessHeap () returned 0x3150000 [0079.607] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.607] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.608] GetProcessHeap () returned 0x3150000 [0079.608] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.608] GetProcessHeap () returned 0x3150000 [0079.608] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.608] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.608] GetProcessHeap () returned 0x3150000 [0079.608] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.608] GetProcessHeap () returned 0x3150000 [0079.608] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.609] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.609] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x26c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.609] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x26c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.609] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0079.609] GetProcessHeap () returned 0x3150000 [0079.609] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.609] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0079.609] GetProcessHeap () returned 0x3150000 [0079.609] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.609] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.609] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.609] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.610] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.610] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0079.610] GetProcessHeap () returned 0x3150000 [0079.610] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.610] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0079.610] GetProcessHeap () returned 0x3150000 [0079.610] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.610] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.610] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.611] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x252a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.611] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x252a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.611] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0079.611] GetProcessHeap () returned 0x3150000 [0079.611] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.611] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0079.611] GetProcessHeap () returned 0x3150000 [0079.611] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.611] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0079.611] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.611] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x280a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.611] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x280a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.611] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0079.611] GetProcessHeap () returned 0x3150000 [0079.611] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.611] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0079.611] GetProcessHeap () returned 0x3150000 [0079.611] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.612] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.612] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.612] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2364, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.612] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0079.612] GetProcessHeap () returned 0x3150000 [0079.612] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.612] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0079.612] GetProcessHeap () returned 0x3150000 [0079.612] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.612] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.613] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.613] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.613] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.613] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0079.613] GetProcessHeap () returned 0x3150000 [0079.613] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.613] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0079.613] GetProcessHeap () returned 0x3150000 [0079.613] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.613] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.887] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.887] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2920, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.887] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2920, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.888] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0079.888] GetProcessHeap () returned 0x3150000 [0079.888] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.888] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0079.888] GetProcessHeap () returned 0x3150000 [0079.888] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.888] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.888] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.888] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x255b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.888] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0079.888] GetProcessHeap () returned 0x3150000 [0079.888] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.888] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0079.888] GetProcessHeap () returned 0x3150000 [0079.888] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.889] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.889] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.889] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0079.889] GetProcessHeap () returned 0x3150000 [0079.889] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.889] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0079.889] GetProcessHeap () returned 0x3150000 [0079.889] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.889] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0079.889] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.889] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.889] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.889] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0079.889] GetProcessHeap () returned 0x3150000 [0079.889] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.889] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0079.890] GetProcessHeap () returned 0x3150000 [0079.890] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.890] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0079.890] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.890] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.890] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.890] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0079.891] GetProcessHeap () returned 0x3150000 [0079.891] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.891] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.891] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0079.891] GetProcessHeap () returned 0x3150000 [0079.891] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.891] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.891] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.891] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.891] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.891] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0079.891] GetProcessHeap () returned 0x3150000 [0079.892] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.892] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0079.892] GetProcessHeap () returned 0x3150000 [0079.892] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.892] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.892] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x221d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.892] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x221d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.892] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0079.892] GetProcessHeap () returned 0x3150000 [0079.892] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.892] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0079.892] GetProcessHeap () returned 0x3150000 [0079.892] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.892] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.892] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.892] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2155, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.892] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2155, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.893] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0079.893] GetProcessHeap () returned 0x3150000 [0079.893] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.893] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0079.893] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0079.893] GetProcessHeap () returned 0x3150000 [0079.893] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0079.893] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b4e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0079.893] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0079.893] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0079.893] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0079.893] GetProcessHeap () returned 0x3150000 [0079.893] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.894] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0079.895] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0079.895] GetProcessHeap () returned 0x3150000 [0079.895] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0079.895] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf", cAlternateFileName="")) returned 1 [0079.895] GetProcessHeap () returned 0x3150000 [0079.895] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0079.895] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0079.895] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.895] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0079.896] GetProcessHeap () returned 0x3150000 [0079.896] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.896] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.899] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.899] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0079.899] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0079.899] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x11be, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0079.899] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0079.899] GetProcessHeap () returned 0x3150000 [0079.899] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.899] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0079.899] GetProcessHeap () returned 0x3150000 [0079.899] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.899] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0079.901] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.901] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0079.901] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0079.901] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0079.901] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0079.901] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0079.901] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0079.901] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0079.901] GetProcessHeap () returned 0x3150000 [0079.901] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0079.901] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.902] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.902] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0079.902] GetProcessHeap () returned 0x3150000 [0079.902] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.902] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.904] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.904] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0079.904] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f35b9b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f35b9b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f35b9b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0079.904] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0079.904] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f35b9b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0079.904] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0079.905] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0079.905] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0079.905] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0079.906] GetProcessHeap () returned 0x3150000 [0079.906] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0079.906] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0079.906] GetProcessHeap () returned 0x3150000 [0079.906] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0079.906] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0079.906] GetProcessHeap () returned 0x3150000 [0079.906] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0079.906] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0079.906] GetProcessHeap () returned 0x3150000 [0079.906] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0079.906] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0079.907] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.907] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0079.907] GetProcessHeap () returned 0x3150000 [0079.907] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0079.907] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0079.908] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.908] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0079.908] GetProcessHeap () returned 0x3150000 [0079.908] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.909] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.909] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.909] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0079.909] GetProcessHeap () returned 0x3150000 [0079.909] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.909] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0079.909] GetProcessHeap () returned 0x3150000 [0079.909] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.909] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.910] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.910] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.910] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.910] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0079.910] GetProcessHeap () returned 0x3150000 [0079.910] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.910] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0079.910] GetProcessHeap () returned 0x3150000 [0079.910] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.910] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.911] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.911] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.911] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.911] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0079.911] GetProcessHeap () returned 0x3150000 [0079.911] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.911] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0079.911] GetProcessHeap () returned 0x3150000 [0079.911] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.911] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.912] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.912] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.912] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.912] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0079.912] GetProcessHeap () returned 0x3150000 [0079.912] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.912] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0079.912] GetProcessHeap () returned 0x3150000 [0079.912] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.912] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.913] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x522, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x522, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.913] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0079.913] GetProcessHeap () returned 0x3150000 [0079.913] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.913] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0079.913] GetProcessHeap () returned 0x3150000 [0079.913] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.913] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.914] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.914] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0079.914] GetProcessHeap () returned 0x3150000 [0079.914] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0079.914] GetProcessHeap () returned 0x3150000 [0079.914] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.914] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0079.914] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.914] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.915] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.915] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0079.915] GetProcessHeap () returned 0x3150000 [0079.915] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.915] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0079.915] GetProcessHeap () returned 0x3150000 [0079.915] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.915] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.915] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.915] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.916] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.916] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0079.916] GetProcessHeap () returned 0x3150000 [0079.916] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.916] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0079.916] GetProcessHeap () returned 0x3150000 [0079.916] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.916] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0079.916] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.917] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x521, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.917] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x521, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.917] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0079.917] GetProcessHeap () returned 0x3150000 [0079.917] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.917] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0079.917] GetProcessHeap () returned 0x3150000 [0079.917] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.917] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.917] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.918] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.918] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.918] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0079.918] GetProcessHeap () returned 0x3150000 [0079.918] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.918] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0079.918] GetProcessHeap () returned 0x3150000 [0079.918] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.918] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0079.918] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.919] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.919] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.919] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0079.919] GetProcessHeap () returned 0x3150000 [0079.919] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.919] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0079.919] GetProcessHeap () returned 0x3150000 [0079.919] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.919] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0079.919] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.920] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.920] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.920] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0079.920] GetProcessHeap () returned 0x3150000 [0079.920] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.920] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0079.920] GetProcessHeap () returned 0x3150000 [0079.920] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.920] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.920] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.920] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.921] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.921] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0079.921] GetProcessHeap () returned 0x3150000 [0079.921] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.921] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0079.921] GetProcessHeap () returned 0x3150000 [0079.921] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.921] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.922] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.922] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0079.922] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0079.922] GetProcessHeap () returned 0x3150000 [0079.922] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.922] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0079.922] GetProcessHeap () returned 0x3150000 [0079.922] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.922] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.923] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.923] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.923] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.923] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0079.923] GetProcessHeap () returned 0x3150000 [0079.923] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.923] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0079.923] GetProcessHeap () returned 0x3150000 [0079.923] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.923] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.924] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.924] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.924] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.924] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0079.924] GetProcessHeap () returned 0x3150000 [0079.924] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.924] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0079.924] GetProcessHeap () returned 0x3150000 [0079.924] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.924] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0079.925] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.925] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x515, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0079.925] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x515, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0079.925] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0079.925] GetProcessHeap () returned 0x3150000 [0079.925] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0079.925] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0079.925] GetProcessHeap () returned 0x3150000 [0079.925] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0079.925] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.064] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.064] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.064] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.064] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.064] GetProcessHeap () returned 0x3150000 [0080.064] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.064] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0080.064] GetProcessHeap () returned 0x3150000 [0080.064] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.064] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.065] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.065] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.065] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.065] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.065] GetProcessHeap () returned 0x3150000 [0080.065] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.065] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0080.065] GetProcessHeap () returned 0x3150000 [0080.065] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.065] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.066] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.066] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.066] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.066] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.066] GetProcessHeap () returned 0x3150000 [0080.066] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.066] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0080.066] GetProcessHeap () returned 0x3150000 [0080.066] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.066] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.066] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.067] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x50b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.067] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x50b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.067] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.067] GetProcessHeap () returned 0x3150000 [0080.067] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.067] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0080.067] GetProcessHeap () returned 0x3150000 [0080.067] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.067] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.068] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.068] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.068] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.068] GetProcessHeap () returned 0x3150000 [0080.068] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.068] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0080.068] GetProcessHeap () returned 0x3150000 [0080.068] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.068] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.069] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.069] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.069] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0080.069] GetProcessHeap () returned 0x3150000 [0080.069] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.069] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0080.069] GetProcessHeap () returned 0x3150000 [0080.069] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.069] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.070] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.070] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.070] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.070] GetProcessHeap () returned 0x3150000 [0080.070] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.070] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0080.070] GetProcessHeap () returned 0x3150000 [0080.070] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.070] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.070] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.070] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.070] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.070] GetProcessHeap () returned 0x3150000 [0080.070] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.070] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0080.071] GetProcessHeap () returned 0x3150000 [0080.071] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.072] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.072] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.072] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.072] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.072] GetProcessHeap () returned 0x3150000 [0080.073] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.073] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0080.073] GetProcessHeap () returned 0x3150000 [0080.073] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.073] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.073] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.073] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.073] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.074] GetProcessHeap () returned 0x3150000 [0080.074] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.074] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0080.074] GetProcessHeap () returned 0x3150000 [0080.074] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.074] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.074] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.074] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.074] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.074] GetProcessHeap () returned 0x3150000 [0080.074] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.074] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0080.074] GetProcessHeap () returned 0x3150000 [0080.074] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.074] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.074] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.075] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.075] GetProcessHeap () returned 0x3150000 [0080.075] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.075] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0080.075] GetProcessHeap () returned 0x3150000 [0080.075] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.075] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.075] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.075] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.076] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.076] GetProcessHeap () returned 0x3150000 [0080.076] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.076] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0080.076] GetProcessHeap () returned 0x3150000 [0080.076] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.076] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.076] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.076] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x52e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.076] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.076] GetProcessHeap () returned 0x3150000 [0080.076] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.076] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.076] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0080.076] GetProcessHeap () returned 0x3150000 [0080.076] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.077] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.077] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x597, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.077] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x597, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.077] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.078] GetProcessHeap () returned 0x3150000 [0080.078] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.078] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0080.078] GetProcessHeap () returned 0x3150000 [0080.078] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.078] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.078] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.078] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.078] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.078] GetProcessHeap () returned 0x3150000 [0080.078] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.078] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0080.078] GetProcessHeap () returned 0x3150000 [0080.078] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.079] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.079] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.079] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.079] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.079] GetProcessHeap () returned 0x3150000 [0080.079] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.079] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0080.079] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.079] GetProcessHeap () returned 0x3150000 [0080.079] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.079] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0080.080] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0080.080] GetProcessHeap () returned 0x3150000 [0080.080] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.080] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.080] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xded, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-selector.js", cAlternateFileName="EDITPD~2.JS")) returned 1 [0080.080] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x203b, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-tool-view.js", cAlternateFileName="EDITPD~1.JS")) returned 1 [0080.080] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0080.080] GetProcessHeap () returned 0x3150000 [0080.081] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\plugins\\rhp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.081] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.081] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-selector.js", cAlternateFileName="EDITPD~2.JS")) returned 1 [0080.081] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x25ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-tool-view.js", cAlternateFileName="EDITPD~1.JS")) returned 1 [0080.081] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x25ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf-tool-view.js", cAlternateFileName="EDITPD~1.JS")) returned 0 [0080.081] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.081] GetProcessHeap () returned 0x3150000 [0080.081] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.081] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0 [0080.081] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.081] GetProcessHeap () returned 0x3150000 [0080.081] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.081] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0080.081] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0080.081] GetProcessHeap () returned 0x3150000 [0080.081] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.082] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0080.083] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0080.083] GetProcessHeap () returned 0x3150000 [0080.083] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.083] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdfupsell-app", cAlternateFileName="EXPORT~1")) returned 1 [0080.083] GetProcessHeap () returned 0x3150000 [0080.083] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.083] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.085] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.085] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.085] GetProcessHeap () returned 0x3150000 [0080.085] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.086] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.087] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.087] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0080.087] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0080.087] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0080.087] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0080.087] GetProcessHeap () returned 0x3150000 [0080.087] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.087] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.087] GetProcessHeap () returned 0x3150000 [0080.088] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.088] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.089] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.089] GetProcessHeap () returned 0x3150000 [0080.089] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.090] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.091] GetProcessHeap () returned 0x3150000 [0080.091] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.091] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.094] GetProcessHeap () returned 0x3150000 [0080.094] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.094] GetProcessHeap () returned 0x3150000 [0080.094] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.094] GetProcessHeap () returned 0x3150000 [0080.094] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.094] GetProcessHeap () returned 0x3150000 [0080.094] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.095] GetProcessHeap () returned 0x3150000 [0080.095] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.095] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.097] GetProcessHeap () returned 0x3150000 [0080.097] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.097] GetProcessHeap () returned 0x3150000 [0080.097] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.097] GetProcessHeap () returned 0x3150000 [0080.097] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.097] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.098] GetProcessHeap () returned 0x3150000 [0080.098] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.098] GetProcessHeap () returned 0x3150000 [0080.098] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.098] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.099] GetProcessHeap () returned 0x3150000 [0080.099] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.099] GetProcessHeap () returned 0x3150000 [0080.099] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.099] GetProcessHeap () returned 0x3150000 [0080.099] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.099] GetProcessHeap () returned 0x3150000 [0080.099] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.099] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.129] GetProcessHeap () returned 0x3150000 [0080.136] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.136] GetProcessHeap () returned 0x3150000 [0080.136] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.136] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.142] GetProcessHeap () returned 0x3150000 [0080.142] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.142] GetProcessHeap () returned 0x3150000 [0080.142] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.142] GetProcessHeap () returned 0x3150000 [0080.142] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.142] GetProcessHeap () returned 0x3150000 [0080.142] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.142] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.172] GetProcessHeap () returned 0x3150000 [0080.172] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.173] GetProcessHeap () returned 0x3150000 [0080.173] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.173] GetProcessHeap () returned 0x3150000 [0080.173] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.173] GetProcessHeap () returned 0x3150000 [0080.173] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.173] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.174] GetProcessHeap () returned 0x3150000 [0080.174] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.174] GetProcessHeap () returned 0x3150000 [0080.174] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.174] GetProcessHeap () returned 0x3150000 [0080.174] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.174] GetProcessHeap () returned 0x3150000 [0080.174] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.174] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.175] GetProcessHeap () returned 0x3150000 [0080.175] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.175] GetProcessHeap () returned 0x3150000 [0080.175] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.175] GetProcessHeap () returned 0x3150000 [0080.175] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.175] GetProcessHeap () returned 0x3150000 [0080.175] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.175] GetProcessHeap () returned 0x3150000 [0080.175] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.175] GetProcessHeap () returned 0x3150000 [0080.175] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.175] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.176] GetProcessHeap () returned 0x3150000 [0080.176] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.176] GetProcessHeap () returned 0x3150000 [0080.176] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.176] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.177] GetProcessHeap () returned 0x3150000 [0080.177] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.177] GetProcessHeap () returned 0x3150000 [0080.177] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.177] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.177] GetProcessHeap () returned 0x3150000 [0080.178] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.178] GetProcessHeap () returned 0x3150000 [0080.178] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.178] GetProcessHeap () returned 0x3150000 [0080.178] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.178] GetProcessHeap () returned 0x3150000 [0080.178] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.178] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.178] GetProcessHeap () returned 0x3150000 [0080.179] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.179] GetProcessHeap () returned 0x3150000 [0080.179] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.179] GetProcessHeap () returned 0x3150000 [0080.179] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.179] GetProcessHeap () returned 0x3150000 [0080.179] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.179] GetProcessHeap () returned 0x3150000 [0080.179] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.179] GetProcessHeap () returned 0x3150000 [0080.179] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.179] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.180] GetProcessHeap () returned 0x3150000 [0080.180] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.180] GetProcessHeap () returned 0x3150000 [0080.180] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.180] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.181] GetProcessHeap () returned 0x3150000 [0080.181] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.181] GetProcessHeap () returned 0x3150000 [0080.181] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.181] GetProcessHeap () returned 0x3150000 [0080.181] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.181] GetProcessHeap () returned 0x3150000 [0080.181] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.181] GetProcessHeap () returned 0x3150000 [0080.181] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.181] GetProcessHeap () returned 0x3150000 [0080.181] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.181] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.182] GetProcessHeap () returned 0x3150000 [0080.182] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.182] GetProcessHeap () returned 0x3150000 [0080.182] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.182] GetProcessHeap () returned 0x3150000 [0080.182] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.182] GetProcessHeap () returned 0x3150000 [0080.182] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.182] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.183] GetProcessHeap () returned 0x3150000 [0080.183] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.183] GetProcessHeap () returned 0x3150000 [0080.183] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.183] GetProcessHeap () returned 0x3150000 [0080.183] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.183] GetProcessHeap () returned 0x3150000 [0080.183] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.183] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.184] GetProcessHeap () returned 0x3150000 [0080.184] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.184] GetProcessHeap () returned 0x3150000 [0080.184] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.184] GetProcessHeap () returned 0x3150000 [0080.184] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.184] GetProcessHeap () returned 0x3150000 [0080.184] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.184] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.185] GetProcessHeap () returned 0x3150000 [0080.185] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.185] GetProcessHeap () returned 0x3150000 [0080.185] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.185] GetProcessHeap () returned 0x3150000 [0080.185] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.185] GetProcessHeap () returned 0x3150000 [0080.185] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.185] GetProcessHeap () returned 0x3150000 [0080.185] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.185] GetProcessHeap () returned 0x3150000 [0080.185] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.185] GetProcessHeap () returned 0x3150000 [0080.185] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.185] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugins\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.186] GetProcessHeap () returned 0x3150000 [0080.186] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.186] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\exportpdfupsell-app\\js\\plugins\\rhp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.186] GetProcessHeap () returned 0x3150000 [0080.186] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.186] GetProcessHeap () returned 0x3150000 [0080.186] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.186] GetProcessHeap () returned 0x3150000 [0080.186] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.188] GetProcessHeap () returned 0x3150000 [0080.188] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.188] GetProcessHeap () returned 0x3150000 [0080.188] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.188] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.188] GetProcessHeap () returned 0x3150000 [0080.188] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.189] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x335390b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x335390b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.190] GetProcessHeap () returned 0x3150000 [0080.190] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.190] GetProcessHeap () returned 0x3150000 [0080.190] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.190] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x250574b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x250574b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.193] GetProcessHeap () returned 0x3150000 [0080.193] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.193] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.194] GetProcessHeap () returned 0x3150000 [0080.194] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.194] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.196] GetProcessHeap () returned 0x3150000 [0080.196] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.196] GetProcessHeap () returned 0x3150000 [0080.196] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.196] GetProcessHeap () returned 0x3150000 [0080.196] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.196] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.198] GetProcessHeap () returned 0x3150000 [0080.198] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.198] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2767d0d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2767d0d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.200] GetProcessHeap () returned 0x3150000 [0080.200] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.200] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b41a7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x27b41a7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x27b41a7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.201] GetProcessHeap () returned 0x3150000 [0080.201] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c20098 [0080.201] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\@1x\\themes\\dark\\*", lpFindFileData=0x53ed1e8 | out: lpFindFileData=0x53ed1e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b41a7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x27b41a7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.203] GetProcessHeap () returned 0x3150000 [0080.203] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c20098 | out: hHeap=0x3150000) returned 1 [0080.203] GetProcessHeap () returned 0x3150000 [0080.203] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.203] GetProcessHeap () returned 0x3150000 [0080.203] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.203] GetProcessHeap () returned 0x3150000 [0080.203] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.203] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x26f5618, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.204] GetProcessHeap () returned 0x3150000 [0080.204] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.204] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\tools\\themes\\dark\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2767d0d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.206] GetProcessHeap () returned 0x3150000 [0080.206] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.206] GetProcessHeap () returned 0x3150000 [0080.206] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.206] GetProcessHeap () returned 0x3150000 [0080.206] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.207] GetProcessHeap () returned 0x3150000 [0080.207] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.208] GetProcessHeap () returned 0x3150000 [0080.208] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.208] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.237] GetProcessHeap () returned 0x3150000 [0080.237] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.238] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.239] GetProcessHeap () returned 0x3150000 [0080.239] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.239] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.240] GetProcessHeap () returned 0x3150000 [0080.240] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.240] GetProcessHeap () returned 0x3150000 [0080.240] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.240] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.240] GetProcessHeap () returned 0x3150000 [0080.240] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.240] GetProcessHeap () returned 0x3150000 [0080.241] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.241] GetProcessHeap () returned 0x3150000 [0080.241] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.241] GetProcessHeap () returned 0x3150000 [0080.241] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.241] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.242] GetProcessHeap () returned 0x3150000 [0080.242] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.242] GetProcessHeap () returned 0x3150000 [0080.242] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.242] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.242] GetProcessHeap () returned 0x3150000 [0080.243] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.243] GetProcessHeap () returned 0x3150000 [0080.243] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.243] GetProcessHeap () returned 0x3150000 [0080.243] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.243] GetProcessHeap () returned 0x3150000 [0080.243] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.243] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.244] GetProcessHeap () returned 0x3150000 [0080.244] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.244] GetProcessHeap () returned 0x3150000 [0080.244] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.244] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.245] GetProcessHeap () returned 0x3150000 [0080.245] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.245] GetProcessHeap () returned 0x3150000 [0080.245] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.245] GetProcessHeap () returned 0x3150000 [0080.245] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.245] GetProcessHeap () returned 0x3150000 [0080.245] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.245] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.246] GetProcessHeap () returned 0x3150000 [0080.246] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.246] GetProcessHeap () returned 0x3150000 [0080.246] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.246] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.246] GetProcessHeap () returned 0x3150000 [0080.247] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.247] GetProcessHeap () returned 0x3150000 [0080.247] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.247] GetProcessHeap () returned 0x3150000 [0080.247] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.247] GetProcessHeap () returned 0x3150000 [0080.247] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.247] GetProcessHeap () returned 0x3150000 [0080.247] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.247] GetProcessHeap () returned 0x3150000 [0080.247] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.247] GetProcessHeap () returned 0x3150000 [0080.247] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.247] GetProcessHeap () returned 0x3150000 [0080.247] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.247] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.248] GetProcessHeap () returned 0x3150000 [0080.248] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.248] GetProcessHeap () returned 0x3150000 [0080.248] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.248] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.249] GetProcessHeap () returned 0x3150000 [0080.249] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.249] GetProcessHeap () returned 0x3150000 [0080.249] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.249] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.249] GetProcessHeap () returned 0x3150000 [0080.249] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.249] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0080.250] GetProcessHeap () returned 0x3150000 [0080.250] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.250] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.250] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.250] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x46ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.250] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x46ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.250] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.250] GetProcessHeap () returned 0x3150000 [0080.250] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.251] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0080.251] GetProcessHeap () returned 0x3150000 [0080.251] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.251] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.251] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.251] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3fc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.251] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3fc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.251] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0080.251] GetProcessHeap () returned 0x3150000 [0080.252] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.252] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0080.252] GetProcessHeap () returned 0x3150000 [0080.252] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.252] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.252] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.252] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x393f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.252] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x393f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.252] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.253] GetProcessHeap () returned 0x3150000 [0080.253] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.253] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0080.253] GetProcessHeap () returned 0x3150000 [0080.253] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.253] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.253] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ea9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.253] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3ea9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.253] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.253] GetProcessHeap () returned 0x3150000 [0080.253] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.253] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0080.253] GetProcessHeap () returned 0x3150000 [0080.253] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.253] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.255] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.256] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.256] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.256] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.256] GetProcessHeap () returned 0x3150000 [0080.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.256] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0080.256] GetProcessHeap () returned 0x3150000 [0080.256] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.256] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.256] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.256] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.256] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.256] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.256] GetProcessHeap () returned 0x3150000 [0080.256] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.256] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0080.256] GetProcessHeap () returned 0x3150000 [0080.257] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.257] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.257] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.257] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3eea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.257] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3eea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.257] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.257] GetProcessHeap () returned 0x3150000 [0080.257] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.257] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0080.257] GetProcessHeap () returned 0x3150000 [0080.258] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.258] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.258] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3779, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.258] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3779, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.258] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0080.258] GetProcessHeap () returned 0x3150000 [0080.258] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.258] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0080.258] GetProcessHeap () returned 0x3150000 [0080.258] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.258] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.258] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.259] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.259] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5492, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.259] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.259] GetProcessHeap () returned 0x3150000 [0080.259] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.259] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0080.259] GetProcessHeap () returned 0x3150000 [0080.259] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.259] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.259] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.259] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.260] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.260] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.260] GetProcessHeap () returned 0x3150000 [0080.260] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.260] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0080.260] GetProcessHeap () returned 0x3150000 [0080.260] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.260] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.260] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a37, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.260] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a37, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.260] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.260] GetProcessHeap () returned 0x3150000 [0080.260] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.260] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0080.260] GetProcessHeap () returned 0x3150000 [0080.260] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.260] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.261] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.261] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.261] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.261] GetProcessHeap () returned 0x3150000 [0080.261] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.261] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0080.261] GetProcessHeap () returned 0x3150000 [0080.261] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.261] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.261] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.261] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.261] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3a9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.261] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.261] GetProcessHeap () returned 0x3150000 [0080.261] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.261] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0080.261] GetProcessHeap () returned 0x3150000 [0080.262] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.262] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.262] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3af2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.262] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3af2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.262] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0080.262] GetProcessHeap () returned 0x3150000 [0080.262] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.262] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.262] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0080.262] GetProcessHeap () returned 0x3150000 [0080.262] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.262] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.263] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.263] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.263] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.263] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.263] GetProcessHeap () returned 0x3150000 [0080.263] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.263] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0080.263] GetProcessHeap () returned 0x3150000 [0080.263] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.263] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.263] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.263] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x37a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.263] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x37a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.264] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0080.264] GetProcessHeap () returned 0x3150000 [0080.264] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.264] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0080.264] GetProcessHeap () returned 0x3150000 [0080.264] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.264] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.264] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.264] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x36b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.264] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x36b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.264] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.264] GetProcessHeap () returned 0x3150000 [0080.264] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.264] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0080.264] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0080.264] GetProcessHeap () returned 0x3150000 [0080.264] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.264] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0080.264] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0080.265] GetProcessHeap () returned 0x3150000 [0080.265] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.266] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0080.266] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.266] GetProcessHeap () returned 0x3150000 [0080.266] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.266] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic-rhp-app", cAlternateFileName="GENERI~1")) returned 1 [0080.266] GetProcessHeap () returned 0x3150000 [0080.266] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.266] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.268] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.268] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.268] GetProcessHeap () returned 0x3150000 [0080.268] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.269] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.270] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.270] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0080.270] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x122b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0080.270] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x122b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0080.270] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.270] GetProcessHeap () returned 0x3150000 [0080.270] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.270] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.270] GetProcessHeap () returned 0x3150000 [0080.270] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.270] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.272] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0080.272] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0080.272] GetProcessHeap () returned 0x3150000 [0080.272] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.272] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.273] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.273] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0080.273] GetProcessHeap () returned 0x3150000 [0080.273] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.273] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.287] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.287] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0080.287] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0080.287] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0080.288] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0080.289] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0080.289] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0080.299] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0080.304] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.304] GetProcessHeap () returned 0x3150000 [0080.305] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.305] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0080.313] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0080.313] GetProcessHeap () returned 0x3150000 [0080.314] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.314] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0080.314] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0080.314] GetProcessHeap () returned 0x3150000 [0080.314] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.314] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.314] GetProcessHeap () returned 0x3150000 [0080.314] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.314] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.323] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.323] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0080.327] GetProcessHeap () returned 0x3150000 [0080.327] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.327] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.328] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.329] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0080.329] GetProcessHeap () returned 0x3150000 [0080.329] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.329] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.329] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.329] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.329] GetProcessHeap () returned 0x3150000 [0080.329] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.329] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0080.329] GetProcessHeap () returned 0x3150000 [0080.329] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.329] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.329] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.329] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.330] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.330] GetProcessHeap () returned 0x3150000 [0080.330] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.330] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0080.330] GetProcessHeap () returned 0x3150000 [0080.330] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.330] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.330] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.330] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.330] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0080.331] GetProcessHeap () returned 0x3150000 [0080.331] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.331] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0080.331] GetProcessHeap () returned 0x3150000 [0080.331] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.331] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.331] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.331] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.331] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0080.331] GetProcessHeap () returned 0x3150000 [0080.332] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.332] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0080.332] GetProcessHeap () returned 0x3150000 [0080.332] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.332] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.333] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.333] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.333] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.333] GetProcessHeap () returned 0x3150000 [0080.333] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.333] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0080.333] GetProcessHeap () returned 0x3150000 [0080.333] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.333] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.333] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.333] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.333] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0080.334] GetProcessHeap () returned 0x3150000 [0080.334] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.334] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0080.334] GetProcessHeap () returned 0x3150000 [0080.334] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.334] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.334] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.334] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.334] GetProcessHeap () returned 0x3150000 [0080.334] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.334] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0080.334] GetProcessHeap () returned 0x3150000 [0080.334] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.334] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.334] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.334] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.334] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.335] GetProcessHeap () returned 0x3150000 [0080.335] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.335] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0080.335] GetProcessHeap () returned 0x3150000 [0080.335] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.335] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.335] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.335] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0080.335] GetProcessHeap () returned 0x3150000 [0080.335] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.335] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0080.335] GetProcessHeap () returned 0x3150000 [0080.335] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.335] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.335] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.335] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.335] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.335] GetProcessHeap () returned 0x3150000 [0080.336] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.336] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0080.336] GetProcessHeap () returned 0x3150000 [0080.336] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.336] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.336] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.336] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.336] GetProcessHeap () returned 0x3150000 [0080.336] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.336] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0080.336] GetProcessHeap () returned 0x3150000 [0080.336] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.336] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.336] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.336] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.336] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.336] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.337] GetProcessHeap () returned 0x3150000 [0080.337] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.337] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0080.337] GetProcessHeap () returned 0x3150000 [0080.337] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.337] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.337] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.337] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.337] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.337] GetProcessHeap () returned 0x3150000 [0080.337] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.337] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.337] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.337] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.337] GetProcessHeap () returned 0x3150000 [0080.337] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.337] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0080.337] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0080.338] GetProcessHeap () returned 0x3150000 [0080.338] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugins\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.338] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.338] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0080.338] GetProcessHeap () returned 0x3150000 [0080.338] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.338] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\generic-rhp-app\\js\\plugins\\rhp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.338] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.338] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1199, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic-rhp-app-selector.js", cAlternateFileName="GENERI~1.JS")) returned 1 [0080.339] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x324a, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic-rhp-app-tool-view.js", cAlternateFileName="GENERI~2.JS")) returned 1 [0080.339] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x324a, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic-rhp-app-tool-view.js", cAlternateFileName="GENERI~2.JS")) returned 0 [0080.339] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.339] GetProcessHeap () returned 0x3150000 [0080.339] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.339] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0 [0080.339] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.339] GetProcessHeap () returned 0x3150000 [0080.339] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.339] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0080.339] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0080.339] GetProcessHeap () returned 0x3150000 [0080.339] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.340] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0080.340] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.340] GetProcessHeap () returned 0x3150000 [0080.340] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.340] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="home", cAlternateFileName="")) returned 1 [0080.341] GetProcessHeap () returned 0x3150000 [0080.341] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.341] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.341] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.341] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.341] GetProcessHeap () returned 0x3150000 [0080.341] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.342] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.343] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.343] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x48f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0080.343] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0080.343] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0080.343] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0080.343] GetProcessHeap () returned 0x3150000 [0080.343] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.343] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.343] GetProcessHeap () returned 0x3150000 [0080.343] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.343] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.345] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="files_icons.png", cAlternateFileName="FILES_~1.PNG")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="files_icons2x.png", cAlternateFileName="FILES_~2.PNG")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0080.346] GetProcessHeap () returned 0x3150000 [0080.346] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.346] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0080.346] GetProcessHeap () returned 0x3150000 [0080.346] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.346] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.347] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.348] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="files_icons.png", cAlternateFileName="FILES_~1.PNG")) returned 1 [0080.348] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="files_icons2x.png", cAlternateFileName="FILES_~2.PNG")) returned 1 [0080.348] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0080.348] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0080.348] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0080.348] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0080.348] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0080.348] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 0 [0080.348] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0080.349] GetProcessHeap () returned 0x3150000 [0080.349] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.349] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0080.349] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0080.349] GetProcessHeap () returned 0x3150000 [0080.349] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.349] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0080.349] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.349] GetProcessHeap () returned 0x3150000 [0080.349] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.349] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.349] GetProcessHeap () returned 0x3150000 [0080.349] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.349] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.350] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0080.350] GetProcessHeap () returned 0x3150000 [0080.350] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.350] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.352] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.352] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0080.352] GetProcessHeap () returned 0x3150000 [0080.352] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.352] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.352] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.352] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.352] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.352] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0080.353] GetProcessHeap () returned 0x3150000 [0080.353] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.353] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0080.353] GetProcessHeap () returned 0x3150000 [0080.353] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.353] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.353] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.353] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.353] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.353] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0080.354] GetProcessHeap () returned 0x3150000 [0080.354] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.354] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0080.354] GetProcessHeap () returned 0x3150000 [0080.354] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.354] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.354] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.354] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.354] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.354] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0080.355] GetProcessHeap () returned 0x3150000 [0080.355] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.355] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0080.355] GetProcessHeap () returned 0x3150000 [0080.355] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.355] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.355] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.355] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.356] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.356] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.356] GetProcessHeap () returned 0x3150000 [0080.356] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.356] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0080.356] GetProcessHeap () returned 0x3150000 [0080.356] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.356] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.356] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.356] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.357] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.357] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0080.357] GetProcessHeap () returned 0x3150000 [0080.357] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.357] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0080.357] GetProcessHeap () returned 0x3150000 [0080.357] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.357] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.357] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.357] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.358] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.358] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.358] GetProcessHeap () returned 0x3150000 [0080.358] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.358] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0080.358] GetProcessHeap () returned 0x3150000 [0080.358] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.358] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.358] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.358] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x396, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.358] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x396, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.358] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.358] GetProcessHeap () returned 0x3150000 [0080.358] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.358] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0080.359] GetProcessHeap () returned 0x3150000 [0080.359] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.359] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.359] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.359] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.359] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.359] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.359] GetProcessHeap () returned 0x3150000 [0080.359] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.359] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0080.360] GetProcessHeap () returned 0x3150000 [0080.360] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.360] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.360] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.360] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.360] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0080.360] GetProcessHeap () returned 0x3150000 [0080.360] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.360] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0080.360] GetProcessHeap () returned 0x3150000 [0080.360] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.360] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.360] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.360] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.360] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.360] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.361] GetProcessHeap () returned 0x3150000 [0080.361] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.361] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0080.361] GetProcessHeap () returned 0x3150000 [0080.361] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.361] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.374] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.386] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.386] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.387] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.395] GetProcessHeap () returned 0x3150000 [0080.395] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.395] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0080.395] GetProcessHeap () returned 0x3150000 [0080.395] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.395] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.395] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.395] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.395] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.396] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.396] GetProcessHeap () returned 0x3150000 [0080.396] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0080.396] GetProcessHeap () returned 0x3150000 [0080.396] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.396] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.396] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.396] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0080.396] GetProcessHeap () returned 0x3150000 [0080.396] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.396] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.396] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0080.396] GetProcessHeap () returned 0x3150000 [0080.397] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.397] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x373f, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0080.397] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x16d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0080.397] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x16d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0080.397] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0080.397] GetProcessHeap () returned 0x3150000 [0080.397] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.398] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0080.398] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.398] GetProcessHeap () returned 0x3150000 [0080.398] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.398] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-computer", cAlternateFileName="MY-COM~2")) returned 1 [0080.398] GetProcessHeap () returned 0x3150000 [0080.398] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.398] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.400] GetProcessHeap () returned 0x3150000 [0080.400] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.401] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.402] GetProcessHeap () returned 0x3150000 [0080.402] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.402] GetProcessHeap () returned 0x3150000 [0080.402] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.402] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.403] GetProcessHeap () returned 0x3150000 [0080.403] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.403] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.404] GetProcessHeap () returned 0x3150000 [0080.404] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.404] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.407] GetProcessHeap () returned 0x3150000 [0080.407] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.407] GetProcessHeap () returned 0x3150000 [0080.407] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.407] GetProcessHeap () returned 0x3150000 [0080.407] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.407] GetProcessHeap () returned 0x3150000 [0080.407] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.407] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.408] GetProcessHeap () returned 0x3150000 [0080.408] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.408] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.409] GetProcessHeap () returned 0x3150000 [0080.409] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.409] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.410] GetProcessHeap () returned 0x3150000 [0080.410] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.410] GetProcessHeap () returned 0x3150000 [0080.410] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.410] GetProcessHeap () returned 0x3150000 [0080.410] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.410] GetProcessHeap () returned 0x3150000 [0080.410] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.410] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.411] GetProcessHeap () returned 0x3150000 [0080.411] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.411] GetProcessHeap () returned 0x3150000 [0080.411] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.411] GetProcessHeap () returned 0x3150000 [0080.411] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.411] GetProcessHeap () returned 0x3150000 [0080.411] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.411] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.412] GetProcessHeap () returned 0x3150000 [0080.412] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.412] GetProcessHeap () returned 0x3150000 [0080.412] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.412] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.412] GetProcessHeap () returned 0x3150000 [0080.412] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.412] GetProcessHeap () returned 0x3150000 [0080.413] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.413] GetProcessHeap () returned 0x3150000 [0080.413] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.413] GetProcessHeap () returned 0x3150000 [0080.413] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.413] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.414] GetProcessHeap () returned 0x3150000 [0080.414] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.414] GetProcessHeap () returned 0x3150000 [0080.414] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.414] GetProcessHeap () returned 0x3150000 [0080.414] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.414] GetProcessHeap () returned 0x3150000 [0080.414] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.414] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.415] GetProcessHeap () returned 0x3150000 [0080.415] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.415] GetProcessHeap () returned 0x3150000 [0080.415] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.415] GetProcessHeap () returned 0x3150000 [0080.415] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.415] GetProcessHeap () returned 0x3150000 [0080.415] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.415] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.416] GetProcessHeap () returned 0x3150000 [0080.416] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.416] GetProcessHeap () returned 0x3150000 [0080.416] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.416] GetProcessHeap () returned 0x3150000 [0080.416] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.416] GetProcessHeap () returned 0x3150000 [0080.416] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.416] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.417] GetProcessHeap () returned 0x3150000 [0080.417] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.417] GetProcessHeap () returned 0x3150000 [0080.417] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.417] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.418] GetProcessHeap () returned 0x3150000 [0080.418] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.418] GetProcessHeap () returned 0x3150000 [0080.418] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.418] GetProcessHeap () returned 0x3150000 [0080.418] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.418] GetProcessHeap () returned 0x3150000 [0080.418] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.418] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.419] GetProcessHeap () returned 0x3150000 [0080.419] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.419] GetProcessHeap () returned 0x3150000 [0080.419] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.419] GetProcessHeap () returned 0x3150000 [0080.419] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.419] GetProcessHeap () returned 0x3150000 [0080.419] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.419] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.420] GetProcessHeap () returned 0x3150000 [0080.420] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.420] GetProcessHeap () returned 0x3150000 [0080.420] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.420] GetProcessHeap () returned 0x3150000 [0080.420] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.420] GetProcessHeap () returned 0x3150000 [0080.420] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.420] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.421] GetProcessHeap () returned 0x3150000 [0080.421] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.421] GetProcessHeap () returned 0x3150000 [0080.421] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.421] GetProcessHeap () returned 0x3150000 [0080.421] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.421] GetProcessHeap () returned 0x3150000 [0080.421] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.421] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.422] GetProcessHeap () returned 0x3150000 [0080.422] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.422] GetProcessHeap () returned 0x3150000 [0080.422] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.422] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.422] GetProcessHeap () returned 0x3150000 [0080.422] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.423] GetProcessHeap () returned 0x3150000 [0080.423] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.423] GetProcessHeap () returned 0x3150000 [0080.423] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.423] GetProcessHeap () returned 0x3150000 [0080.423] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.423] GetProcessHeap () returned 0x3150000 [0080.423] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.423] GetProcessHeap () returned 0x3150000 [0080.423] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.423] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.424] GetProcessHeap () returned 0x3150000 [0080.424] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.424] GetProcessHeap () returned 0x3150000 [0080.424] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.424] GetProcessHeap () returned 0x3150000 [0080.424] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.424] GetProcessHeap () returned 0x3150000 [0080.424] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.424] GetProcessHeap () returned 0x3150000 [0080.424] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.424] GetProcessHeap () returned 0x3150000 [0080.424] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.424] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.425] GetProcessHeap () returned 0x3150000 [0080.425] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.425] GetProcessHeap () returned 0x3150000 [0080.425] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.425] GetProcessHeap () returned 0x3150000 [0080.425] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.425] GetProcessHeap () returned 0x3150000 [0080.425] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.425] GetProcessHeap () returned 0x3150000 [0080.425] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.425] GetProcessHeap () returned 0x3150000 [0080.425] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.425] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.425] GetProcessHeap () returned 0x3150000 [0080.425] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.425] GetProcessHeap () returned 0x3150000 [0080.426] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.426] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.426] GetProcessHeap () returned 0x3150000 [0080.426] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.426] GetProcessHeap () returned 0x3150000 [0080.426] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.426] GetProcessHeap () returned 0x3150000 [0080.426] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.427] GetProcessHeap () returned 0x3150000 [0080.427] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.427] GetProcessHeap () returned 0x3150000 [0080.427] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.427] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.428] GetProcessHeap () returned 0x3150000 [0080.428] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.429] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.433] GetProcessHeap () returned 0x3150000 [0080.433] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.433] GetProcessHeap () returned 0x3150000 [0080.433] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.433] GetProcessHeap () returned 0x3150000 [0080.433] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bf0080 [0080.433] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.471] GetProcessHeap () returned 0x3150000 [0080.471] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.471] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.472] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.472] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.472] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.472] GetProcessHeap () returned 0x3150000 [0080.472] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.472] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0080.472] GetProcessHeap () returned 0x3150000 [0080.472] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.472] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.473] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.473] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.473] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.473] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.473] GetProcessHeap () returned 0x3150000 [0080.473] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.473] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0080.473] GetProcessHeap () returned 0x3150000 [0080.473] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.473] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.474] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.474] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.474] GetProcessHeap () returned 0x3150000 [0080.474] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.474] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0080.474] GetProcessHeap () returned 0x3150000 [0080.474] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.474] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.475] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.475] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.475] GetProcessHeap () returned 0x3150000 [0080.475] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.475] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0080.475] GetProcessHeap () returned 0x3150000 [0080.475] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.475] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.476] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.476] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.476] GetProcessHeap () returned 0x3150000 [0080.476] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.476] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0080.476] GetProcessHeap () returned 0x3150000 [0080.476] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.476] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.477] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.477] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.477] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.477] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.477] GetProcessHeap () returned 0x3150000 [0080.477] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.477] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0080.477] GetProcessHeap () returned 0x3150000 [0080.477] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.477] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.478] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.478] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.478] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.478] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.478] GetProcessHeap () returned 0x3150000 [0080.478] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.478] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0080.478] GetProcessHeap () returned 0x3150000 [0080.478] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.478] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.479] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.479] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.479] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.479] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.479] GetProcessHeap () returned 0x3150000 [0080.479] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.479] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0080.479] GetProcessHeap () returned 0x3150000 [0080.479] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.479] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.479] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.479] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.479] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.479] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.479] GetProcessHeap () returned 0x3150000 [0080.479] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.479] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0080.479] GetProcessHeap () returned 0x3150000 [0080.480] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.480] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.480] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.480] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.480] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.480] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.480] GetProcessHeap () returned 0x3150000 [0080.480] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.480] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0080.480] GetProcessHeap () returned 0x3150000 [0080.481] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.481] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.481] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.481] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.481] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.481] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.481] GetProcessHeap () returned 0x3150000 [0080.481] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.481] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0080.481] GetProcessHeap () returned 0x3150000 [0080.482] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.482] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.482] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.482] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.482] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.482] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.482] GetProcessHeap () returned 0x3150000 [0080.482] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.482] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0080.482] GetProcessHeap () returned 0x3150000 [0080.483] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.483] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.484] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.484] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.484] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.484] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.484] GetProcessHeap () returned 0x3150000 [0080.484] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.484] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0080.485] GetProcessHeap () returned 0x3150000 [0080.485] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.485] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.485] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.485] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.485] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.485] GetProcessHeap () returned 0x3150000 [0080.485] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.485] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0080.486] GetProcessHeap () returned 0x3150000 [0080.486] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.486] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.486] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.486] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.486] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0080.486] GetProcessHeap () returned 0x3150000 [0080.486] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.486] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0080.486] GetProcessHeap () returned 0x3150000 [0080.486] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.486] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.487] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.487] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.487] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.487] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.487] GetProcessHeap () returned 0x3150000 [0080.487] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.487] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0080.487] GetProcessHeap () returned 0x3150000 [0080.487] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.487] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.487] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.487] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.487] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.487] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0080.488] GetProcessHeap () returned 0x3150000 [0080.488] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.488] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0080.488] GetProcessHeap () returned 0x3150000 [0080.488] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.488] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.488] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.488] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.488] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.488] GetProcessHeap () returned 0x3150000 [0080.488] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.488] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0080.488] GetProcessHeap () returned 0x3150000 [0080.488] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.488] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.489] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.489] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.489] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.489] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.489] GetProcessHeap () returned 0x3150000 [0080.489] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.489] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0080.489] GetProcessHeap () returned 0x3150000 [0080.489] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.489] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.489] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.489] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.490] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.490] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.490] GetProcessHeap () returned 0x3150000 [0080.490] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.490] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0080.490] GetProcessHeap () returned 0x3150000 [0080.490] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.490] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.490] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.490] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.490] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.490] GetProcessHeap () returned 0x3150000 [0080.490] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.490] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0080.490] GetProcessHeap () returned 0x3150000 [0080.490] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.490] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.491] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.491] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x351, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.491] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x351, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.491] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0080.491] GetProcessHeap () returned 0x3150000 [0080.491] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.491] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0080.491] GetProcessHeap () returned 0x3150000 [0080.491] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.491] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.491] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.492] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.492] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.492] FindClose (in: hFindFile=0x57d1c38 | out: hFindFile=0x57d1c38) returned 1 [0080.492] GetProcessHeap () returned 0x3150000 [0080.492] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.492] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0080.492] GetProcessHeap () returned 0x3150000 [0080.492] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.492] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.493] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.493] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.493] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.493] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.493] GetProcessHeap () returned 0x3150000 [0080.493] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.493] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0080.493] GetProcessHeap () returned 0x3150000 [0080.493] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.493] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.493] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.493] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.493] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.493] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.493] GetProcessHeap () returned 0x3150000 [0080.493] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.494] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0080.494] GetProcessHeap () returned 0x3150000 [0080.494] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.494] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.494] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.494] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x365, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.494] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.494] GetProcessHeap () returned 0x3150000 [0080.494] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.494] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0080.494] GetProcessHeap () returned 0x3150000 [0080.494] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.494] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.495] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.495] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.495] FindNextFileW (in: hFindFile=0x57d1e78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.495] FindClose (in: hFindFile=0x57d1e78 | out: hFindFile=0x57d1e78) returned 1 [0080.495] GetProcessHeap () returned 0x3150000 [0080.495] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.495] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0080.495] GetProcessHeap () returned 0x3150000 [0080.495] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.495] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.495] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.495] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.496] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.496] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.496] GetProcessHeap () returned 0x3150000 [0080.496] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.496] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0080.496] GetProcessHeap () returned 0x3150000 [0080.496] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.496] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.496] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.496] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.496] GetProcessHeap () returned 0x3150000 [0080.496] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.496] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0080.496] GetProcessHeap () returned 0x3150000 [0080.496] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.496] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.496] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.497] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.497] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.497] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0080.497] GetProcessHeap () returned 0x3150000 [0080.497] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.497] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0080.497] GetProcessHeap () returned 0x3150000 [0080.497] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.497] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.497] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.497] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.497] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.497] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.497] GetProcessHeap () returned 0x3150000 [0080.497] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.497] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.497] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0080.498] GetProcessHeap () returned 0x3150000 [0080.498] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.498] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.498] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x363, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.498] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x363, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.498] FindClose (in: hFindFile=0x57d2378 | out: hFindFile=0x57d2378) returned 1 [0080.498] GetProcessHeap () returned 0x3150000 [0080.498] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.498] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0080.498] GetProcessHeap () returned 0x3150000 [0080.498] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.498] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1d78 [0080.498] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.498] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.498] FindNextFileW (in: hFindFile=0x57d1d78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.498] FindClose (in: hFindFile=0x57d1d78 | out: hFindFile=0x57d1d78) returned 1 [0080.498] GetProcessHeap () returned 0x3150000 [0080.499] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.499] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0080.499] GetProcessHeap () returned 0x3150000 [0080.499] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.499] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.499] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.499] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.499] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.499] FindClose (in: hFindFile=0x57d1f38 | out: hFindFile=0x57d1f38) returned 1 [0080.500] GetProcessHeap () returned 0x3150000 [0080.500] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.500] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0080.500] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.500] GetProcessHeap () returned 0x3150000 [0080.500] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bf0080 | out: hHeap=0x3150000) returned 1 [0080.500] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0080.500] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf97, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0080.500] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf97, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0080.500] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.500] GetProcessHeap () returned 0x3150000 [0080.500] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.501] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0080.502] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0080.502] GetProcessHeap () returned 0x3150000 [0080.502] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.502] FindNextFileW (in: hFindFile=0x57d22b8, lpFindFileData=0x53ee148 | out: lpFindFileData=0x53ee148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-files", cAlternateFileName="")) returned 1 [0080.502] GetProcessHeap () returned 0x3150000 [0080.502] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.502] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.502] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.502] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0080.502] GetProcessHeap () returned 0x3150000 [0080.503] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.503] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.503] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.503] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0080.503] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0080.503] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0080.503] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.503] GetProcessHeap () returned 0x3150000 [0080.503] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.503] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0080.504] GetProcessHeap () returned 0x3150000 [0080.504] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.504] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.506] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.506] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0080.506] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0080.506] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0080.506] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0080.507] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0080.507] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0080.507] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0080.507] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0080.507] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0080.507] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0080.507] GetProcessHeap () returned 0x3150000 [0080.507] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.508] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.533] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.533] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0080.533] GetProcessHeap () returned 0x3150000 [0080.533] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.533] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.535] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.535] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0080.535] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0080.535] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0080.535] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0080.535] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0080.535] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0080.535] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0080.535] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0080.536] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0080.536] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d074e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0d074e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 0 [0080.536] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0080.536] GetProcessHeap () returned 0x3150000 [0080.536] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.536] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0080.536] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.537] GetProcessHeap () returned 0x3150000 [0080.537] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.537] FindNextFileW (in: hFindFile=0x57d2038, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0080.537] FindClose (in: hFindFile=0x57d2038 | out: hFindFile=0x57d2038) returned 1 [0080.537] GetProcessHeap () returned 0x3150000 [0080.537] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.537] FindNextFileW (in: hFindFile=0x57d2378, lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0080.537] GetProcessHeap () returned 0x3150000 [0080.537] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.537] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.537] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.538] FindNextFileW (in: hFindFile=0x57d1c38, lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0080.538] GetProcessHeap () returned 0x3150000 [0080.538] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.538] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.539] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.539] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0080.539] GetProcessHeap () returned 0x3150000 [0080.539] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.539] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.540] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.540] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.540] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.540] GetProcessHeap () returned 0x3150000 [0080.540] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.540] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0080.540] GetProcessHeap () returned 0x3150000 [0080.540] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.540] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.541] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.541] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.541] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.541] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.541] GetProcessHeap () returned 0x3150000 [0080.541] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.541] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0080.541] GetProcessHeap () returned 0x3150000 [0080.541] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.541] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.541] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.541] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.541] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.542] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.542] GetProcessHeap () returned 0x3150000 [0080.542] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.542] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0080.542] GetProcessHeap () returned 0x3150000 [0080.542] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.542] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.542] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.542] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.542] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.543] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0080.543] GetProcessHeap () returned 0x3150000 [0080.543] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.543] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0080.543] GetProcessHeap () returned 0x3150000 [0080.543] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.543] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.543] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.543] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.543] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.543] GetProcessHeap () returned 0x3150000 [0080.543] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.543] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0080.543] GetProcessHeap () returned 0x3150000 [0080.543] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.543] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.544] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.544] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.544] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.544] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.544] GetProcessHeap () returned 0x3150000 [0080.544] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.544] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0080.544] GetProcessHeap () returned 0x3150000 [0080.544] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.544] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.545] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.545] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.545] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.545] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.545] GetProcessHeap () returned 0x3150000 [0080.545] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.545] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0080.545] GetProcessHeap () returned 0x3150000 [0080.545] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.546] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.546] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.547] FindClose (in: hFindFile=0x57d2238 | out: hFindFile=0x57d2238) returned 1 [0080.547] GetProcessHeap () returned 0x3150000 [0080.547] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0080.547] GetProcessHeap () returned 0x3150000 [0080.547] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.547] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.547] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.547] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.547] GetProcessHeap () returned 0x3150000 [0080.547] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.547] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0080.548] GetProcessHeap () returned 0x3150000 [0080.548] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.548] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.548] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.548] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x421, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.548] FindNextFileW (in: hFindFile=0x57d23b8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x421, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.548] FindClose (in: hFindFile=0x57d23b8 | out: hFindFile=0x57d23b8) returned 1 [0080.548] GetProcessHeap () returned 0x3150000 [0080.548] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.548] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0080.548] GetProcessHeap () returned 0x3150000 [0080.549] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.549] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.549] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.549] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.549] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.549] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0080.549] GetProcessHeap () returned 0x3150000 [0080.549] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.549] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0080.549] GetProcessHeap () returned 0x3150000 [0080.549] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.550] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.550] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.550] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.550] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0080.551] GetProcessHeap () returned 0x3150000 [0080.551] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.551] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0080.551] GetProcessHeap () returned 0x3150000 [0080.551] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.551] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.552] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x57d1f78, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.552] FindClose (in: hFindFile=0x57d1f78 | out: hFindFile=0x57d1f78) returned 1 [0080.552] GetProcessHeap () returned 0x3150000 [0080.552] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0080.552] GetProcessHeap () returned 0x3150000 [0080.552] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.552] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.552] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.552] FindNextFileW (in: hFindFile=0x57d2278, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0080.552] FindClose (in: hFindFile=0x57d2278 | out: hFindFile=0x57d2278) returned 1 [0080.553] GetProcessHeap () returned 0x3150000 [0080.553] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0080.553] GetProcessHeap () returned 0x3150000 [0080.553] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.553] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.553] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.553] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.553] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.554] GetProcessHeap () returned 0x3150000 [0080.554] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.554] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0080.554] GetProcessHeap () returned 0x3150000 [0080.554] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.554] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.554] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.554] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.554] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.554] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.555] GetProcessHeap () returned 0x3150000 [0080.555] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.555] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0080.555] GetProcessHeap () returned 0x3150000 [0080.555] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.555] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.555] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.555] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.556] FindNextFileW (in: hFindFile=0x57d1db8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.556] FindClose (in: hFindFile=0x57d1db8 | out: hFindFile=0x57d1db8) returned 1 [0080.556] GetProcessHeap () returned 0x3150000 [0080.556] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.556] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0080.556] GetProcessHeap () returned 0x3150000 [0080.556] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.556] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.556] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.557] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x446, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.557] FindNextFileW (in: hFindFile=0x57d22f8, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x446, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0080.557] FindClose (in: hFindFile=0x57d22f8 | out: hFindFile=0x57d22f8) returned 1 [0080.557] GetProcessHeap () returned 0x3150000 [0080.557] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.557] FindNextFileW (in: hFindFile=0x57d1f38, lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0080.557] GetProcessHeap () returned 0x3150000 [0080.557] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.557] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.557] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.558] FindNextFileW (in: hFindFile=0x57d2238, lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0080.559] GetProcessHeap () returned 0x3150000 [0080.559] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.559] GetProcessHeap () returned 0x3150000 [0080.559] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.559] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.560] GetProcessHeap () returned 0x3150000 [0080.560] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.560] GetProcessHeap () returned 0x3150000 [0080.560] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.560] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.561] GetProcessHeap () returned 0x3150000 [0080.561] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.561] GetProcessHeap () returned 0x3150000 [0080.561] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.561] GetProcessHeap () returned 0x3150000 [0080.561] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.561] GetProcessHeap () returned 0x3150000 [0080.561] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.561] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.562] GetProcessHeap () returned 0x3150000 [0080.562] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.562] GetProcessHeap () returned 0x3150000 [0080.562] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.562] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.563] GetProcessHeap () returned 0x3150000 [0080.563] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.563] GetProcessHeap () returned 0x3150000 [0080.563] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.563] GetProcessHeap () returned 0x3150000 [0080.563] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.563] GetProcessHeap () returned 0x3150000 [0080.563] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.563] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.564] GetProcessHeap () returned 0x3150000 [0080.564] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.564] GetProcessHeap () returned 0x3150000 [0080.564] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.564] GetProcessHeap () returned 0x3150000 [0080.564] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.564] GetProcessHeap () returned 0x3150000 [0080.564] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.564] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.565] GetProcessHeap () returned 0x3150000 [0080.565] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.565] GetProcessHeap () returned 0x3150000 [0080.565] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.565] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.566] GetProcessHeap () returned 0x3150000 [0080.566] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.566] GetProcessHeap () returned 0x3150000 [0080.566] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.566] GetProcessHeap () returned 0x3150000 [0080.566] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.566] GetProcessHeap () returned 0x3150000 [0080.566] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.566] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.567] GetProcessHeap () returned 0x3150000 [0080.567] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.567] GetProcessHeap () returned 0x3150000 [0080.567] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.567] GetProcessHeap () returned 0x3150000 [0080.567] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.567] GetProcessHeap () returned 0x3150000 [0080.567] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.567] GetProcessHeap () returned 0x3150000 [0080.567] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.567] GetProcessHeap () returned 0x3150000 [0080.567] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.567] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e38798, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e38798, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.568] GetProcessHeap () returned 0x3150000 [0080.568] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.568] GetProcessHeap () returned 0x3150000 [0080.568] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.568] GetProcessHeap () returned 0x3150000 [0080.568] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.569] GetProcessHeap () returned 0x3150000 [0080.569] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.569] GetProcessHeap () returned 0x3150000 [0080.569] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.569] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.570] GetProcessHeap () returned 0x3150000 [0080.570] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.570] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.571] GetProcessHeap () returned 0x3150000 [0080.571] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.571] GetProcessHeap () returned 0x3150000 [0080.571] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.571] GetProcessHeap () returned 0x3150000 [0080.571] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.571] GetProcessHeap () returned 0x3150000 [0080.571] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.571] GetProcessHeap () returned 0x3150000 [0080.571] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.571] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.594] GetProcessHeap () returned 0x3150000 [0080.594] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.594] GetProcessHeap () returned 0x3150000 [0080.594] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.594] GetProcessHeap () returned 0x3150000 [0080.594] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.594] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.712] GetProcessHeap () returned 0x3150000 [0080.712] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.713] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.752] GetProcessHeap () returned 0x3150000 [0080.752] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.753] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.757] GetProcessHeap () returned 0x3150000 [0080.757] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.757] GetProcessHeap () returned 0x3150000 [0080.758] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.758] GetProcessHeap () returned 0x3150000 [0080.758] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.758] GetProcessHeap () returned 0x3150000 [0080.758] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.758] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.759] GetProcessHeap () returned 0x3150000 [0080.759] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.759] GetProcessHeap () returned 0x3150000 [0080.759] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.759] GetProcessHeap () returned 0x3150000 [0080.759] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.759] GetProcessHeap () returned 0x3150000 [0080.759] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.759] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.760] GetProcessHeap () returned 0x3150000 [0080.760] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.760] GetProcessHeap () returned 0x3150000 [0080.760] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.760] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.761] GetProcessHeap () returned 0x3150000 [0080.761] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.761] GetProcessHeap () returned 0x3150000 [0080.761] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.761] GetProcessHeap () returned 0x3150000 [0080.761] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.761] GetProcessHeap () returned 0x3150000 [0080.761] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.761] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.762] GetProcessHeap () returned 0x3150000 [0080.762] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.762] GetProcessHeap () returned 0x3150000 [0080.762] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.762] GetProcessHeap () returned 0x3150000 [0080.762] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.762] GetProcessHeap () returned 0x3150000 [0080.762] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.762] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.763] GetProcessHeap () returned 0x3150000 [0080.763] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.763] GetProcessHeap () returned 0x3150000 [0080.763] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.763] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.764] GetProcessHeap () returned 0x3150000 [0080.764] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.764] GetProcessHeap () returned 0x3150000 [0080.764] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.764] GetProcessHeap () returned 0x3150000 [0080.764] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.764] GetProcessHeap () returned 0x3150000 [0080.764] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.764] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.765] GetProcessHeap () returned 0x3150000 [0080.765] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.765] GetProcessHeap () returned 0x3150000 [0080.765] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.765] GetProcessHeap () returned 0x3150000 [0080.765] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.765] GetProcessHeap () returned 0x3150000 [0080.765] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.765] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.766] GetProcessHeap () returned 0x3150000 [0080.766] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.766] GetProcessHeap () returned 0x3150000 [0080.766] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.766] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.767] GetProcessHeap () returned 0x3150000 [0080.767] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.767] GetProcessHeap () returned 0x3150000 [0080.767] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.767] GetProcessHeap () returned 0x3150000 [0080.767] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.767] GetProcessHeap () returned 0x3150000 [0080.767] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.767] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.768] GetProcessHeap () returned 0x3150000 [0080.768] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.768] GetProcessHeap () returned 0x3150000 [0080.768] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.768] GetProcessHeap () returned 0x3150000 [0080.768] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.768] GetProcessHeap () returned 0x3150000 [0080.768] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.768] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.769] GetProcessHeap () returned 0x3150000 [0080.769] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.769] GetProcessHeap () returned 0x3150000 [0080.769] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.769] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.770] GetProcessHeap () returned 0x3150000 [0080.770] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.770] GetProcessHeap () returned 0x3150000 [0080.770] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.770] GetProcessHeap () returned 0x3150000 [0080.770] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.770] GetProcessHeap () returned 0x3150000 [0080.770] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.770] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.770] GetProcessHeap () returned 0x3150000 [0080.770] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.770] GetProcessHeap () returned 0x3150000 [0080.770] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.771] GetProcessHeap () returned 0x3150000 [0080.771] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.771] GetProcessHeap () returned 0x3150000 [0080.771] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.771] GetProcessHeap () returned 0x3150000 [0080.771] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.771] GetProcessHeap () returned 0x3150000 [0080.771] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.771] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.771] GetProcessHeap () returned 0x3150000 [0080.771] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.772] GetProcessHeap () returned 0x3150000 [0080.772] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.772] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.773] GetProcessHeap () returned 0x3150000 [0080.773] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.773] GetProcessHeap () returned 0x3150000 [0080.773] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.773] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.773] GetProcessHeap () returned 0x3150000 [0080.773] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.773] GetProcessHeap () returned 0x3150000 [0080.774] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.774] GetProcessHeap () returned 0x3150000 [0080.774] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.774] GetProcessHeap () returned 0x3150000 [0080.774] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.774] GetProcessHeap () returned 0x3150000 [0080.774] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.774] GetProcessHeap () returned 0x3150000 [0080.774] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.774] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.775] GetProcessHeap () returned 0x3150000 [0080.775] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.775] GetProcessHeap () returned 0x3150000 [0080.775] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.775] GetProcessHeap () returned 0x3150000 [0080.775] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.775] GetProcessHeap () returned 0x3150000 [0080.775] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.775] GetProcessHeap () returned 0x3150000 [0080.775] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.775] GetProcessHeap () returned 0x3150000 [0080.775] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.775] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.775] GetProcessHeap () returned 0x3150000 [0080.775] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.776] GetProcessHeap () returned 0x3150000 [0080.776] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.776] GetProcessHeap () returned 0x3150000 [0080.776] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.777] GetProcessHeap () returned 0x3150000 [0080.777] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.777] GetProcessHeap () returned 0x3150000 [0080.777] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.777] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files-select\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.778] GetProcessHeap () returned 0x3150000 [0080.778] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.778] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files-select\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.779] GetProcessHeap () returned 0x3150000 [0080.779] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.779] GetProcessHeap () returned 0x3150000 [0080.779] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files-select\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.779] GetProcessHeap () returned 0x3150000 [0080.779] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.779] GetProcessHeap () returned 0x3150000 [0080.779] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.779] GetProcessHeap () returned 0x3150000 [0080.779] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.779] GetProcessHeap () returned 0x3150000 [0080.779] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.779] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.780] GetProcessHeap () returned 0x3150000 [0080.780] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.780] GetProcessHeap () returned 0x3150000 [0080.780] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.780] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.784] GetProcessHeap () returned 0x3150000 [0080.784] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.784] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.785] GetProcessHeap () returned 0x3150000 [0080.785] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.786] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.789] GetProcessHeap () returned 0x3150000 [0080.789] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.789] GetProcessHeap () returned 0x3150000 [0080.789] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.790] GetProcessHeap () returned 0x3150000 [0080.790] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.791] GetProcessHeap () returned 0x3150000 [0080.791] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.791] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.792] GetProcessHeap () returned 0x3150000 [0080.792] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.792] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.811] GetProcessHeap () returned 0x3150000 [0080.811] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.813] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.813] GetProcessHeap () returned 0x3150000 [0080.813] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.813] GetProcessHeap () returned 0x3150000 [0080.814] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.814] GetProcessHeap () returned 0x3150000 [0080.814] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.814] GetProcessHeap () returned 0x3150000 [0080.814] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.814] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.815] GetProcessHeap () returned 0x3150000 [0080.815] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.815] GetProcessHeap () returned 0x3150000 [0080.815] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.815] GetProcessHeap () returned 0x3150000 [0080.815] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.815] GetProcessHeap () returned 0x3150000 [0080.815] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.815] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.816] GetProcessHeap () returned 0x3150000 [0080.816] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.816] GetProcessHeap () returned 0x3150000 [0080.816] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.816] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.817] GetProcessHeap () returned 0x3150000 [0080.817] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.817] GetProcessHeap () returned 0x3150000 [0080.817] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.817] GetProcessHeap () returned 0x3150000 [0080.817] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.817] GetProcessHeap () returned 0x3150000 [0080.817] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.817] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.818] GetProcessHeap () returned 0x3150000 [0080.818] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.818] GetProcessHeap () returned 0x3150000 [0080.818] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.818] GetProcessHeap () returned 0x3150000 [0080.818] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.818] GetProcessHeap () returned 0x3150000 [0080.818] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.818] GetProcessHeap () returned 0x3150000 [0080.818] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.818] GetProcessHeap () returned 0x3150000 [0080.818] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.818] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.819] GetProcessHeap () returned 0x3150000 [0080.819] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.819] GetProcessHeap () returned 0x3150000 [0080.819] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.819] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.819] GetProcessHeap () returned 0x3150000 [0080.819] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.819] GetProcessHeap () returned 0x3150000 [0080.820] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.820] GetProcessHeap () returned 0x3150000 [0080.820] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.820] GetProcessHeap () returned 0x3150000 [0080.820] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.820] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.821] GetProcessHeap () returned 0x3150000 [0080.821] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.821] GetProcessHeap () returned 0x3150000 [0080.821] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.821] GetProcessHeap () returned 0x3150000 [0080.821] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.821] GetProcessHeap () returned 0x3150000 [0080.821] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.821] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.822] GetProcessHeap () returned 0x3150000 [0080.822] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.822] GetProcessHeap () returned 0x3150000 [0080.822] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.822] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.823] GetProcessHeap () returned 0x3150000 [0080.823] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.823] GetProcessHeap () returned 0x3150000 [0080.823] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.823] GetProcessHeap () returned 0x3150000 [0080.823] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.823] GetProcessHeap () returned 0x3150000 [0080.823] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.823] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.823] GetProcessHeap () returned 0x3150000 [0080.824] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.824] GetProcessHeap () returned 0x3150000 [0080.824] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.824] GetProcessHeap () returned 0x3150000 [0080.824] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.824] GetProcessHeap () returned 0x3150000 [0080.824] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.824] GetProcessHeap () returned 0x3150000 [0080.824] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.824] GetProcessHeap () returned 0x3150000 [0080.824] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.824] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.825] GetProcessHeap () returned 0x3150000 [0080.825] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.825] GetProcessHeap () returned 0x3150000 [0080.825] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.825] GetProcessHeap () returned 0x3150000 [0080.825] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.825] GetProcessHeap () returned 0x3150000 [0080.825] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.825] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.826] GetProcessHeap () returned 0x3150000 [0080.826] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.826] GetProcessHeap () returned 0x3150000 [0080.826] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.826] GetProcessHeap () returned 0x3150000 [0080.826] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.826] GetProcessHeap () returned 0x3150000 [0080.826] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.826] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.826] GetProcessHeap () returned 0x3150000 [0080.826] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.826] GetProcessHeap () returned 0x3150000 [0080.826] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.827] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.827] GetProcessHeap () returned 0x3150000 [0080.827] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.861] GetProcessHeap () returned 0x3150000 [0080.862] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.862] GetProcessHeap () returned 0x3150000 [0080.862] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.862] GetProcessHeap () returned 0x3150000 [0080.862] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.862] GetProcessHeap () returned 0x3150000 [0080.862] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.862] GetProcessHeap () returned 0x3150000 [0080.862] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.862] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.863] GetProcessHeap () returned 0x3150000 [0080.863] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.863] GetProcessHeap () returned 0x3150000 [0080.863] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.863] GetProcessHeap () returned 0x3150000 [0080.863] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.863] GetProcessHeap () returned 0x3150000 [0080.863] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.863] GetProcessHeap () returned 0x3150000 [0080.863] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.863] GetProcessHeap () returned 0x3150000 [0080.863] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.863] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.865] GetProcessHeap () returned 0x3150000 [0080.865] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.865] GetProcessHeap () returned 0x3150000 [0080.865] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.865] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\ob-preview\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.865] GetProcessHeap () returned 0x3150000 [0080.865] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.865] GetProcessHeap () returned 0x3150000 [0080.865] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.865] GetProcessHeap () returned 0x3150000 [0080.865] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.866] GetProcessHeap () returned 0x3150000 [0080.866] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.867] GetProcessHeap () returned 0x3150000 [0080.867] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.867] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.867] GetProcessHeap () returned 0x3150000 [0080.867] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.868] GetProcessHeap () returned 0x3150000 [0080.868] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.868] GetProcessHeap () returned 0x3150000 [0080.868] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.868] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.869] GetProcessHeap () returned 0x3150000 [0080.869] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.869] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbbe3ee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.872] GetProcessHeap () returned 0x3150000 [0080.872] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.873] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.876] GetProcessHeap () returned 0x3150000 [0080.876] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\cs-cz\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.876] GetProcessHeap () returned 0x3150000 [0080.876] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.876] GetProcessHeap () returned 0x3150000 [0080.876] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.876] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\da-dk\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.877] GetProcessHeap () returned 0x3150000 [0080.877] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.877] GetProcessHeap () returned 0x3150000 [0080.877] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.877] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\de-de\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.877] GetProcessHeap () returned 0x3150000 [0080.877] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.877] GetProcessHeap () returned 0x3150000 [0080.878] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\en-us\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.878] GetProcessHeap () returned 0x3150000 [0080.878] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.878] GetProcessHeap () returned 0x3150000 [0080.878] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.878] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\es-es\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.879] GetProcessHeap () returned 0x3150000 [0080.879] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.879] GetProcessHeap () returned 0x3150000 [0080.879] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.879] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\fi-fi\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.880] GetProcessHeap () returned 0x3150000 [0080.880] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.880] GetProcessHeap () returned 0x3150000 [0080.880] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\fr-fr\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.880] GetProcessHeap () returned 0x3150000 [0080.880] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.880] GetProcessHeap () returned 0x3150000 [0080.880] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.880] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\it-it\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.880] GetProcessHeap () returned 0x3150000 [0080.881] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.881] GetProcessHeap () returned 0x3150000 [0080.881] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\ja-jp\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.881] GetProcessHeap () returned 0x3150000 [0080.881] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.881] GetProcessHeap () returned 0x3150000 [0080.881] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.881] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\ko-kr\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.882] GetProcessHeap () returned 0x3150000 [0080.882] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.882] GetProcessHeap () returned 0x3150000 [0080.882] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\nb-no\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.882] GetProcessHeap () returned 0x3150000 [0080.882] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.882] GetProcessHeap () returned 0x3150000 [0080.882] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.882] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\pl-pl\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.883] GetProcessHeap () returned 0x3150000 [0080.883] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.883] GetProcessHeap () returned 0x3150000 [0080.883] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.883] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\pt-br\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.884] GetProcessHeap () returned 0x3150000 [0080.884] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.884] GetProcessHeap () returned 0x3150000 [0080.884] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\ru-ru\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.884] GetProcessHeap () returned 0x3150000 [0080.884] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.884] GetProcessHeap () returned 0x3150000 [0080.884] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.884] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\sv-se\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.884] GetProcessHeap () returned 0x3150000 [0080.884] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.885] GetProcessHeap () returned 0x3150000 [0080.885] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\tr-tr\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.885] GetProcessHeap () returned 0x3150000 [0080.885] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.885] GetProcessHeap () returned 0x3150000 [0080.885] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.885] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\zh-cn\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.886] GetProcessHeap () returned 0x3150000 [0080.886] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.886] GetProcessHeap () returned 0x3150000 [0080.886] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c10090 [0080.886] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\zh-tw\\*", lpFindFileData=0x53ed478 | out: lpFindFileData=0x53ed478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.886] GetProcessHeap () returned 0x3150000 [0080.886] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c10090 | out: hHeap=0x3150000) returned 1 [0080.886] GetProcessHeap () returned 0x3150000 [0080.886] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.887] GetProcessHeap () returned 0x3150000 [0080.887] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.888] GetProcessHeap () returned 0x3150000 [0080.888] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.888] GetProcessHeap () returned 0x3150000 [0080.888] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.888] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbbe3ee, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbbe3ee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.907] GetProcessHeap () returned 0x3150000 [0080.907] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.908] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbbe3ee, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbbe3ee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.944] GetProcessHeap () returned 0x3150000 [0080.944] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.945] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.948] GetProcessHeap () returned 0x3150000 [0080.948] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.948] GetProcessHeap () returned 0x3150000 [0080.948] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.948] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.950] GetProcessHeap () returned 0x3150000 [0080.950] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.951] GetProcessHeap () returned 0x3150000 [0080.951] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbbe3ee, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbbe3ee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbbe3ee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.951] GetProcessHeap () returned 0x3150000 [0080.951] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.951] GetProcessHeap () returned 0x3150000 [0080.951] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.951] GetProcessHeap () returned 0x3150000 [0080.951] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.951] GetProcessHeap () returned 0x3150000 [0080.951] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.951] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.952] GetProcessHeap () returned 0x3150000 [0080.952] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.952] GetProcessHeap () returned 0x3150000 [0080.952] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.952] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.953] GetProcessHeap () returned 0x3150000 [0080.953] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.953] GetProcessHeap () returned 0x3150000 [0080.953] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.953] GetProcessHeap () returned 0x3150000 [0080.953] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.953] GetProcessHeap () returned 0x3150000 [0080.953] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.953] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.954] GetProcessHeap () returned 0x3150000 [0080.954] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.954] GetProcessHeap () returned 0x3150000 [0080.954] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.954] GetProcessHeap () returned 0x3150000 [0080.954] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.954] GetProcessHeap () returned 0x3150000 [0080.954] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.954] GetProcessHeap () returned 0x3150000 [0080.954] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.954] GetProcessHeap () returned 0x3150000 [0080.954] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.954] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.955] GetProcessHeap () returned 0x3150000 [0080.955] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.955] GetProcessHeap () returned 0x3150000 [0080.955] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.955] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.956] GetProcessHeap () returned 0x3150000 [0080.956] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.956] GetProcessHeap () returned 0x3150000 [0080.956] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.956] GetProcessHeap () returned 0x3150000 [0080.956] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.956] GetProcessHeap () returned 0x3150000 [0080.956] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.956] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.956] GetProcessHeap () returned 0x3150000 [0080.956] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.957] GetProcessHeap () returned 0x3150000 [0080.957] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.957] GetProcessHeap () returned 0x3150000 [0080.957] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.957] GetProcessHeap () returned 0x3150000 [0080.957] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.957] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.958] GetProcessHeap () returned 0x3150000 [0080.958] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.958] GetProcessHeap () returned 0x3150000 [0080.958] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.958] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.959] GetProcessHeap () returned 0x3150000 [0080.959] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.959] GetProcessHeap () returned 0x3150000 [0080.959] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.959] GetProcessHeap () returned 0x3150000 [0080.959] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.959] GetProcessHeap () returned 0x3150000 [0080.959] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.959] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.960] GetProcessHeap () returned 0x3150000 [0080.960] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.960] GetProcessHeap () returned 0x3150000 [0080.960] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.960] GetProcessHeap () returned 0x3150000 [0080.960] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.960] GetProcessHeap () returned 0x3150000 [0080.960] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.960] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.961] GetProcessHeap () returned 0x3150000 [0080.961] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.961] GetProcessHeap () returned 0x3150000 [0080.961] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.961] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.962] GetProcessHeap () returned 0x3150000 [0080.962] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.962] GetProcessHeap () returned 0x3150000 [0080.962] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.962] GetProcessHeap () returned 0x3150000 [0080.962] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.962] GetProcessHeap () returned 0x3150000 [0080.962] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.962] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0080.963] GetProcessHeap () returned 0x3150000 [0080.963] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.963] GetProcessHeap () returned 0x3150000 [0080.963] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.963] GetProcessHeap () returned 0x3150000 [0080.963] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.963] GetProcessHeap () returned 0x3150000 [0080.963] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.963] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbe4654, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.964] GetProcessHeap () returned 0x3150000 [0080.964] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.964] GetProcessHeap () returned 0x3150000 [0080.964] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbe4654, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.964] GetProcessHeap () returned 0x3150000 [0080.964] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.964] GetProcessHeap () returned 0x3150000 [0080.964] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.964] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.965] GetProcessHeap () returned 0x3150000 [0080.965] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.965] GetProcessHeap () returned 0x3150000 [0080.965] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.965] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.966] GetProcessHeap () returned 0x3150000 [0080.966] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.966] GetProcessHeap () returned 0x3150000 [0080.966] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.966] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbe4654, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.966] GetProcessHeap () returned 0x3150000 [0080.966] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.966] GetProcessHeap () returned 0x3150000 [0080.966] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.967] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.970] GetProcessHeap () returned 0x3150000 [0080.970] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.970] GetProcessHeap () returned 0x3150000 [0080.970] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.970] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.971] GetProcessHeap () returned 0x3150000 [0080.971] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.971] GetProcessHeap () returned 0x3150000 [0080.971] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.971] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.971] GetProcessHeap () returned 0x3150000 [0080.971] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.971] GetProcessHeap () returned 0x3150000 [0080.971] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.972] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.972] GetProcessHeap () returned 0x3150000 [0080.972] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.972] GetProcessHeap () returned 0x3150000 [0080.972] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.972] GetProcessHeap () returned 0x3150000 [0080.972] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.973] GetProcessHeap () returned 0x3150000 [0080.973] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0080.973] GetProcessHeap () returned 0x3150000 [0080.973] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0080.973] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0080.973] GetProcessHeap () returned 0x3150000 [0080.973] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.974] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.974] GetProcessHeap () returned 0x3150000 [0080.974] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.974] GetProcessHeap () returned 0x3150000 [0080.975] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.975] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0080.976] GetProcessHeap () returned 0x3150000 [0080.976] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.976] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\images\\themes\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.977] GetProcessHeap () returned 0x3150000 [0080.977] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.978] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\images\\themes\\dark\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0080.979] GetProcessHeap () returned 0x3150000 [0080.979] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.979] GetProcessHeap () returned 0x3150000 [0080.979] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0080.980] GetProcessHeap () returned 0x3150000 [0080.980] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0080.980] GetProcessHeap () returned 0x3150000 [0080.980] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0080.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0080.980] GetProcessHeap () returned 0x3150000 [0080.980] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0080.980] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0080.982] GetProcessHeap () returned 0x3150000 [0080.982] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.982] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.983] GetProcessHeap () returned 0x3150000 [0080.983] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.983] GetProcessHeap () returned 0x3150000 [0080.983] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0080.983] GetProcessHeap () returned 0x3150000 [0080.983] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.983] GetProcessHeap () returned 0x3150000 [0080.983] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.983] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.984] GetProcessHeap () returned 0x3150000 [0080.984] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.984] GetProcessHeap () returned 0x3150000 [0080.984] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.984] GetProcessHeap () returned 0x3150000 [0080.984] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.984] GetProcessHeap () returned 0x3150000 [0080.984] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.984] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.985] GetProcessHeap () returned 0x3150000 [0080.985] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.985] GetProcessHeap () returned 0x3150000 [0080.985] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.985] GetProcessHeap () returned 0x3150000 [0080.985] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.985] GetProcessHeap () returned 0x3150000 [0080.985] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.985] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0080.986] GetProcessHeap () returned 0x3150000 [0080.986] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.986] GetProcessHeap () returned 0x3150000 [0080.986] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0080.986] GetProcessHeap () returned 0x3150000 [0080.986] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.986] GetProcessHeap () returned 0x3150000 [0080.986] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.986] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0080.986] GetProcessHeap () returned 0x3150000 [0080.986] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.987] GetProcessHeap () returned 0x3150000 [0080.987] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0080.987] GetProcessHeap () returned 0x3150000 [0080.987] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0080.987] GetProcessHeap () returned 0x3150000 [0080.987] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0080.987] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0081.004] GetProcessHeap () returned 0x3150000 [0081.004] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.004] GetProcessHeap () returned 0x3150000 [0081.004] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.004] GetProcessHeap () returned 0x3150000 [0081.004] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.004] GetProcessHeap () returned 0x3150000 [0081.004] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0081.004] GetProcessHeap () returned 0x3150000 [0081.004] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.004] GetProcessHeap () returned 0x3150000 [0081.004] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0081.004] GetProcessHeap () returned 0x3150000 [0081.004] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0081.004] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\plugins\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0081.005] GetProcessHeap () returned 0x3150000 [0081.005] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.005] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\pages-app\\js\\plugins\\rhp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0081.005] GetProcessHeap () returned 0x3150000 [0081.005] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.005] GetProcessHeap () returned 0x3150000 [0081.005] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0081.005] GetProcessHeap () returned 0x3150000 [0081.005] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0081.007] GetProcessHeap () returned 0x3150000 [0081.007] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0081.007] GetProcessHeap () returned 0x3150000 [0081.007] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0081.007] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0081.008] GetProcessHeap () returned 0x3150000 [0081.008] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0081.008] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0081.009] GetProcessHeap () returned 0x3150000 [0081.009] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0081.009] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets\\Sample Files\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0081.011] GetProcessHeap () returned 0x3150000 [0081.011] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0081.011] GetProcessHeap () returned 0x3150000 [0081.011] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0081.011] GetProcessHeap () returned 0x3150000 [0081.011] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0081.011] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0081.012] GetProcessHeap () returned 0x3150000 [0081.012] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0081.012] GetProcessHeap () returned 0x3150000 [0081.012] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0081.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0081.012] GetProcessHeap () returned 0x3150000 [0081.012] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0081.012] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0081.014] GetProcessHeap () returned 0x3150000 [0081.014] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.014] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0081.015] GetProcessHeap () returned 0x3150000 [0081.015] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.015] GetProcessHeap () returned 0x3150000 [0081.015] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.015] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0081.016] GetProcessHeap () returned 0x3150000 [0081.016] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.016] GetProcessHeap () returned 0x3150000 [0081.016] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.016] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0081.017] GetProcessHeap () returned 0x3150000 [0081.017] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.017] GetProcessHeap () returned 0x3150000 [0081.017] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.017] GetProcessHeap () returned 0x3150000 [0081.017] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.017] GetProcessHeap () returned 0x3150000 [0081.017] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.017] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0081.018] GetProcessHeap () returned 0x3150000 [0081.018] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.018] GetProcessHeap () returned 0x3150000 [0081.018] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.018] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0081.019] GetProcessHeap () returned 0x3150000 [0081.019] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.019] GetProcessHeap () returned 0x3150000 [0081.019] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.019] GetProcessHeap () returned 0x3150000 [0081.019] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.019] GetProcessHeap () returned 0x3150000 [0081.019] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.019] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.020] GetProcessHeap () returned 0x3150000 [0081.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.020] GetProcessHeap () returned 0x3150000 [0081.020] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.020] GetProcessHeap () returned 0x3150000 [0081.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.020] GetProcessHeap () returned 0x3150000 [0081.020] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0081.020] GetProcessHeap () returned 0x3150000 [0081.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.020] GetProcessHeap () returned 0x3150000 [0081.020] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.020] GetProcessHeap () returned 0x3150000 [0081.020] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.020] GetProcessHeap () returned 0x3150000 [0081.020] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.020] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.021] GetProcessHeap () returned 0x3150000 [0081.021] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.021] GetProcessHeap () returned 0x3150000 [0081.021] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.021] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.022] GetProcessHeap () returned 0x3150000 [0081.022] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.022] GetProcessHeap () returned 0x3150000 [0081.022] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0081.022] GetProcessHeap () returned 0x3150000 [0081.022] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.022] GetProcessHeap () returned 0x3150000 [0081.022] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.022] GetProcessHeap () returned 0x3150000 [0081.022] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.022] GetProcessHeap () returned 0x3150000 [0081.022] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.022] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0081.023] GetProcessHeap () returned 0x3150000 [0081.023] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.023] GetProcessHeap () returned 0x3150000 [0081.023] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.023] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.023] GetProcessHeap () returned 0x3150000 [0081.023] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.024] GetProcessHeap () returned 0x3150000 [0081.024] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.024] GetProcessHeap () returned 0x3150000 [0081.024] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.024] GetProcessHeap () returned 0x3150000 [0081.024] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.024] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.025] GetProcessHeap () returned 0x3150000 [0081.025] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.025] GetProcessHeap () returned 0x3150000 [0081.025] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.025] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\nb-no\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0081.025] GetProcessHeap () returned 0x3150000 [0081.026] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.026] GetProcessHeap () returned 0x3150000 [0081.026] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\nl-nl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.026] GetProcessHeap () returned 0x3150000 [0081.026] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.026] GetProcessHeap () returned 0x3150000 [0081.026] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\pl-pl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.026] GetProcessHeap () returned 0x3150000 [0081.026] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.026] GetProcessHeap () returned 0x3150000 [0081.026] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.026] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\pt-br\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0081.027] GetProcessHeap () returned 0x3150000 [0081.027] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.027] GetProcessHeap () returned 0x3150000 [0081.027] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.027] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\ro-ro\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.028] GetProcessHeap () returned 0x3150000 [0081.029] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.029] GetProcessHeap () returned 0x3150000 [0081.029] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\root\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.029] GetProcessHeap () returned 0x3150000 [0081.029] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.029] GetProcessHeap () returned 0x3150000 [0081.029] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\ru-ru\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0081.029] GetProcessHeap () returned 0x3150000 [0081.029] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.029] GetProcessHeap () returned 0x3150000 [0081.029] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.029] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\sk-sk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.030] GetProcessHeap () returned 0x3150000 [0081.030] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.030] GetProcessHeap () returned 0x3150000 [0081.030] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\sl-si\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.030] GetProcessHeap () returned 0x3150000 [0081.030] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.030] GetProcessHeap () returned 0x3150000 [0081.030] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.030] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0081.030] GetProcessHeap () returned 0x3150000 [0081.030] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.030] GetProcessHeap () returned 0x3150000 [0081.030] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\sv-se\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.031] GetProcessHeap () returned 0x3150000 [0081.031] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.031] GetProcessHeap () returned 0x3150000 [0081.031] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.031] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0081.032] GetProcessHeap () returned 0x3150000 [0081.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.032] GetProcessHeap () returned 0x3150000 [0081.032] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\uk-ua\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.032] GetProcessHeap () returned 0x3150000 [0081.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.032] GetProcessHeap () returned 0x3150000 [0081.032] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\zh-cn\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0081.032] GetProcessHeap () returned 0x3150000 [0081.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.032] GetProcessHeap () returned 0x3150000 [0081.032] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.032] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\zh-tw\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0081.032] GetProcessHeap () returned 0x3150000 [0081.032] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.033] GetProcessHeap () returned 0x3150000 [0081.033] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0081.033] GetProcessHeap () returned 0x3150000 [0081.033] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0081.034] GetProcessHeap () returned 0x3150000 [0081.034] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x57e9c38 | out: hHeap=0x3150000) returned 1 [0081.034] GetProcessHeap () returned 0x3150000 [0081.034] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x57e9c38 [0081.034] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\*", lpFindFileData=0x53edeb8 | out: lpFindFileData=0x53edeb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2238 [0081.039] GetProcessHeap () returned 0x3150000 [0081.039] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0081.039] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0081.039] GetProcessHeap () returned 0x3150000 [0081.039] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0081.039] GetProcessHeap () returned 0x3150000 [0081.039] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0081.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\images\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0081.040] GetProcessHeap () returned 0x3150000 [0081.040] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0081.040] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\images\\themeless\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0081.048] GetProcessHeap () returned 0x3150000 [0081.048] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.048] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\images\\themeless\\Appstore\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb5a07c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb5a07c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0081.051] GetProcessHeap () returned 0x3150000 [0081.051] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.051] GetProcessHeap () returned 0x3150000 [0081.051] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.051] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\images\\themeless\\Playstore\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb5a07c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0081.054] GetProcessHeap () returned 0x3150000 [0081.054] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.054] GetProcessHeap () returned 0x3150000 [0081.054] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5be0078 | out: hHeap=0x3150000) returned 1 [0081.054] GetProcessHeap () returned 0x3150000 [0081.054] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5bb0068 | out: hHeap=0x3150000) returned 1 [0081.054] GetProcessHeap () returned 0x3150000 [0081.054] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5bb0068 [0081.054] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\*", lpFindFileData=0x53edc28 | out: lpFindFileData=0x53edc28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1db8 [0081.055] GetProcessHeap () returned 0x3150000 [0081.055] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5be0078 [0081.055] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\*", lpFindFileData=0x53ed998 | out: lpFindFileData=0x53ed998*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2038 [0081.067] GetProcessHeap () returned 0x3150000 [0081.067] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.067] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\ar-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d23b8 [0081.068] GetProcessHeap () returned 0x3150000 [0081.068] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.068] GetProcessHeap () returned 0x3150000 [0081.068] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.068] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\ca-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0081.069] GetProcessHeap () returned 0x3150000 [0081.069] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.069] GetProcessHeap () returned 0x3150000 [0081.069] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\cs-cz\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2378 [0081.069] GetProcessHeap () returned 0x3150000 [0081.069] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.069] GetProcessHeap () returned 0x3150000 [0081.069] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.069] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\da-dk\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0081.070] GetProcessHeap () returned 0x3150000 [0081.070] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.070] GetProcessHeap () returned 0x3150000 [0081.070] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.070] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\de-de\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0081.071] GetProcessHeap () returned 0x3150000 [0081.071] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.071] GetProcessHeap () returned 0x3150000 [0081.071] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\en-ae\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f38 [0081.071] GetProcessHeap () returned 0x3150000 [0081.071] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.071] GetProcessHeap () returned 0x3150000 [0081.071] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\en-gb\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0081.071] GetProcessHeap () returned 0x3150000 [0081.071] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.071] GetProcessHeap () returned 0x3150000 [0081.071] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.071] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\en-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0081.072] GetProcessHeap () returned 0x3150000 [0081.072] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.072] GetProcessHeap () returned 0x3150000 [0081.072] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\es-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0081.072] GetProcessHeap () returned 0x3150000 [0081.072] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.072] GetProcessHeap () returned 0x3150000 [0081.072] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.072] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\eu-es\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0081.073] GetProcessHeap () returned 0x3150000 [0081.073] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.073] GetProcessHeap () returned 0x3150000 [0081.073] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.073] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\fi-fi\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0081.074] GetProcessHeap () returned 0x3150000 [0081.074] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.074] GetProcessHeap () returned 0x3150000 [0081.074] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.074] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1c38 [0081.074] GetProcessHeap () returned 0x3150000 [0081.075] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.075] GetProcessHeap () returned 0x3150000 [0081.075] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0081.075] GetProcessHeap () returned 0x3150000 [0081.075] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.075] GetProcessHeap () returned 0x3150000 [0081.075] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.075] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\he-il\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1f78 [0081.075] GetProcessHeap () returned 0x3150000 [0081.075] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.076] GetProcessHeap () returned 0x3150000 [0081.076] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.076] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\hr-hr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0081.078] GetProcessHeap () returned 0x3150000 [0081.078] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.078] GetProcessHeap () returned 0x3150000 [0081.078] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.078] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\hu-hu\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d22f8 [0081.080] GetProcessHeap () returned 0x3150000 [0081.080] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.080] GetProcessHeap () returned 0x3150000 [0081.080] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\it-it\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 [0081.080] GetProcessHeap () returned 0x3150000 [0081.080] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.080] GetProcessHeap () returned 0x3150000 [0081.080] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.080] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\ja-jp\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d1e78 [0081.081] GetProcessHeap () returned 0x3150000 [0081.081] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x5c00088 | out: hHeap=0x3150000) returned 1 [0081.081] GetProcessHeap () returned 0x3150000 [0081.081] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5c00088 [0081.081] FindFirstFileW (in: lpFileName="\\\\?\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\nls\\ko-kr\\*", lpFindFileData=0x53ed708 | out: lpFindFileData=0x53ed708*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x57d2278 Thread: id = 19 os_tid = 0xf80 [0055.230] GetProcessHeap () returned 0x3150000 [0055.230] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3218fb0 [0055.230] GetProcessHeap () returned 0x3150000 [0055.230] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3228fb8 [0055.231] GetProcessHeap () returned 0x3150000 [0055.231] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x28) returned 0x320faf0 [0055.231] GetProcessHeap () returned 0x3150000 [0055.231] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x110102) returned 0x55f6020 [0055.234] GetProcessHeap () returned 0x3150000 [0055.234] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x50) returned 0x3170648 [0055.234] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0055.234] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0055.234] Wow64DisableWow64FsRedirection (in: OldValue=0x546fdb8 | out: OldValue=0x546fdb8*=0x0) returned 1 [0055.234] GetProcessHeap () returned 0x3150000 [0055.234] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170648 | out: hHeap=0x3150000) returned 1 [0055.234] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8 [0055.529] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=42674) returned 1 [0055.529] CloseHandle (hObject=0x2b8) returned 1 [0055.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20 [0055.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20 [0055.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0055.530] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0055.530] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0055.530] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0055.530] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2fc [0055.545] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xa6b2, lpOverlapped=0x0) returned 1 [0055.564] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xa6c0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xa6c0, lpOverlapped=0x0) returned 1 [0055.566] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x122, lpOverlapped=0x0) returned 1 [0055.566] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0055.566] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0055.566] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xa6b2, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xa6b2, lpOverlapped=0x0) returned 1 [0055.566] FlushFileBuffers (hFile=0x2bc) returned 1 [0056.039] FlushFileBuffers (hFile=0x2fc) returned 1 [0056.060] CloseHandle (hObject=0x2bc) returned 1 [0056.062] CloseHandle (hObject=0x2fc) returned 1 [0056.066] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 1 [0056.068] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0056.072] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=144072) returned 1 [0056.072] CloseHandle (hObject=0x2fc) returned 1 [0056.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 0x20 [0056.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 0x20 [0056.072] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.072] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0056.072] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0056.072] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0056.072] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0056.073] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x232c8, lpOverlapped=0x0) returned 1 [0056.078] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x232d0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x232d0, lpOverlapped=0x0) returned 1 [0056.081] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0056.081] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0056.081] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0056.081] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x232c8, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x232c8, lpOverlapped=0x0) returned 1 [0056.082] FlushFileBuffers (hFile=0x2fc) returned 1 [0056.642] FlushFileBuffers (hFile=0x2bc) returned 1 [0056.643] CloseHandle (hObject=0x2fc) returned 1 [0056.647] CloseHandle (hObject=0x2bc) returned 1 [0056.650] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 1 [0056.652] SetEvent (hEvent=0x284) returned 1 [0056.652] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0056.653] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=17240) returned 1 [0056.653] CloseHandle (hObject=0x2bc) returned 1 [0056.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 0x80 [0056.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 0x80 [0056.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.653] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0056.654] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0056.654] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0056.654] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0056.654] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4358, lpOverlapped=0x0) returned 1 [0056.655] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4360, lpOverlapped=0x0) returned 1 [0056.657] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0056.657] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0056.657] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0056.657] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4358, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4358, lpOverlapped=0x0) returned 1 [0056.657] FlushFileBuffers (hFile=0x2bc) returned 1 [0056.659] FlushFileBuffers (hFile=0x2fc) returned 1 [0056.767] CloseHandle (hObject=0x2bc) returned 1 [0056.769] CloseHandle (hObject=0x2fc) returned 1 [0056.771] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 1 [0056.772] SetEvent (hEvent=0x284) returned 1 [0056.772] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0056.772] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=6309) returned 1 [0056.772] CloseHandle (hObject=0x2fc) returned 1 [0056.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80 [0056.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80 [0056.772] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.772] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0056.772] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0056.772] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0056.773] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0056.775] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x18a5, lpOverlapped=0x0) returned 1 [0056.777] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x18b0, lpOverlapped=0x0) returned 1 [0056.778] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0056.778] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0056.778] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0056.779] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x18a5, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x18a5, lpOverlapped=0x0) returned 1 [0056.779] FlushFileBuffers (hFile=0x2fc) returned 1 [0056.784] FlushFileBuffers (hFile=0x2bc) returned 1 [0056.785] CloseHandle (hObject=0x2fc) returned 1 [0056.786] CloseHandle (hObject=0x2bc) returned 1 [0056.787] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 1 [0056.788] SetEvent (hEvent=0x284) returned 1 [0056.788] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0056.788] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=60816) returned 1 [0056.788] CloseHandle (hObject=0x2bc) returned 1 [0056.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80 [0056.788] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80 [0056.789] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.789] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0056.789] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0056.789] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0056.789] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0056.789] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xed90, lpOverlapped=0x0) returned 1 [0056.794] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xeda0, lpOverlapped=0x0) returned 1 [0056.796] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0056.796] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0056.796] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0056.796] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xed90, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xed90, lpOverlapped=0x0) returned 1 [0056.796] FlushFileBuffers (hFile=0x2bc) returned 1 [0057.244] FlushFileBuffers (hFile=0x2fc) returned 1 [0057.247] CloseHandle (hObject=0x2bc) returned 1 [0057.250] CloseHandle (hObject=0x2fc) returned 1 [0057.252] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 1 [0057.254] SetEvent (hEvent=0x284) returned 1 [0057.255] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0057.256] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=3726) returned 1 [0057.256] CloseHandle (hObject=0x2fc) returned 1 [0057.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80 [0057.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80 [0057.257] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0057.257] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0057.257] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0057.257] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0057.257] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c [0057.263] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xe8e, lpOverlapped=0x0) returned 1 [0057.270] WriteFile (in: hFile=0x33c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xe90, lpOverlapped=0x0) returned 1 [0057.271] WriteFile (in: hFile=0x33c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0057.271] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0057.271] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0057.272] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xe8e, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xe8e, lpOverlapped=0x0) returned 1 [0057.272] FlushFileBuffers (hFile=0x2fc) returned 1 [0057.491] FlushFileBuffers (hFile=0x33c) returned 1 [0057.492] CloseHandle (hObject=0x2fc) returned 1 [0057.494] CloseHandle (hObject=0x33c) returned 1 [0057.495] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 1 [0057.496] SetEvent (hEvent=0x284) returned 1 [0057.496] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0057.496] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=18264) returned 1 [0057.496] CloseHandle (hObject=0x33c) returned 1 [0057.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 0x80 [0057.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 0x80 [0057.496] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0057.497] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0057.497] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0057.497] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0057.497] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0057.497] ReadFile (in: hFile=0x33c, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4758, lpOverlapped=0x0) returned 1 [0057.499] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4760, lpOverlapped=0x0) returned 1 [0057.500] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0057.500] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0057.501] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0057.501] WriteFile (in: hFile=0x33c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4758, lpOverlapped=0x0) returned 1 [0057.501] FlushFileBuffers (hFile=0x33c) returned 1 [0057.868] FlushFileBuffers (hFile=0x2fc) returned 1 [0057.870] CloseHandle (hObject=0x33c) returned 1 [0057.871] CloseHandle (hObject=0x2fc) returned 1 [0057.872] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 1 [0057.874] SetEvent (hEvent=0x284) returned 1 [0057.874] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0057.881] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=18264) returned 1 [0057.881] CloseHandle (hObject=0x340) returned 1 [0057.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 0x80 [0057.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 0x80 [0057.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0057.881] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0057.881] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0057.881] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0057.881] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0057.881] ReadFile (in: hFile=0x340, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4758, lpOverlapped=0x0) returned 1 [0057.883] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4760, lpOverlapped=0x0) returned 1 [0057.884] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0057.885] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0057.885] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0057.885] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4758, lpOverlapped=0x0) returned 1 [0057.885] FlushFileBuffers (hFile=0x340) returned 1 [0058.300] FlushFileBuffers (hFile=0x2fc) returned 1 [0058.301] CloseHandle (hObject=0x340) returned 1 [0058.302] CloseHandle (hObject=0x2fc) returned 1 [0058.303] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 1 [0058.304] SetEvent (hEvent=0x284) returned 1 [0058.304] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0058.306] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=8876) returned 1 [0058.306] CloseHandle (hObject=0x2fc) returned 1 [0058.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80 [0058.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80 [0058.306] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0058.306] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0058.306] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0058.306] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0058.306] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0058.308] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x22ac, lpOverlapped=0x0) returned 1 [0058.309] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x22b0, lpOverlapped=0x0) returned 1 [0058.310] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0058.311] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0058.311] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0058.311] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x22ac, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x22ac, lpOverlapped=0x0) returned 1 [0058.311] FlushFileBuffers (hFile=0x2fc) returned 1 [0058.313] FlushFileBuffers (hFile=0x340) returned 1 [0058.314] CloseHandle (hObject=0x2fc) returned 1 [0058.315] CloseHandle (hObject=0x340) returned 1 [0058.316] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 1 [0058.317] SetEvent (hEvent=0x284) returned 1 [0058.317] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0058.317] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=86284) returned 1 [0058.317] CloseHandle (hObject=0x340) returned 1 [0058.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80 [0058.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80 [0058.317] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0058.317] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0058.317] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0058.318] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0058.318] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0058.318] ReadFile (in: hFile=0x340, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x1510c, lpOverlapped=0x0) returned 1 [0058.321] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x15110, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x15110, lpOverlapped=0x0) returned 1 [0058.323] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0058.323] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0058.323] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0058.323] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x1510c, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x1510c, lpOverlapped=0x0) returned 1 [0058.324] FlushFileBuffers (hFile=0x340) returned 1 [0058.984] FlushFileBuffers (hFile=0x2fc) returned 1 [0058.986] CloseHandle (hObject=0x340) returned 1 [0058.988] CloseHandle (hObject=0x2fc) returned 1 [0058.990] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 1 [0058.992] SetEvent (hEvent=0x284) returned 1 [0058.992] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0058.992] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=3188) returned 1 [0058.992] CloseHandle (hObject=0x2fc) returned 1 [0058.992] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80 [0058.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80 [0058.993] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0058.993] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0058.993] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0058.993] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0058.993] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0058.995] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xc74, lpOverlapped=0x0) returned 1 [0058.997] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xc80, lpOverlapped=0x0) returned 1 [0058.998] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0058.998] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0058.998] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0058.999] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xc74, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xc74, lpOverlapped=0x0) returned 1 [0058.999] FlushFileBuffers (hFile=0x2fc) returned 1 [0059.001] FlushFileBuffers (hFile=0x340) returned 1 [0059.002] CloseHandle (hObject=0x2fc) returned 1 [0059.004] CloseHandle (hObject=0x340) returned 1 [0059.004] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 1 [0059.005] SetEvent (hEvent=0x284) returned 1 [0059.006] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0059.006] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=77232) returned 1 [0059.006] CloseHandle (hObject=0x340) returned 1 [0059.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80 [0059.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80 [0059.006] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0059.006] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0059.006] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.006] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.006] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0059.006] ReadFile (in: hFile=0x340, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x12db0, lpOverlapped=0x0) returned 1 [0059.009] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x12dc0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x12dc0, lpOverlapped=0x0) returned 1 [0059.011] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0059.012] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.012] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.012] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x12db0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x12db0, lpOverlapped=0x0) returned 1 [0059.012] FlushFileBuffers (hFile=0x340) returned 1 [0059.173] FlushFileBuffers (hFile=0x2fc) returned 1 [0059.183] CloseHandle (hObject=0x340) returned 1 [0059.189] CloseHandle (hObject=0x2fc) returned 1 [0059.191] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 1 [0059.192] SetEvent (hEvent=0x284) returned 1 [0059.192] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0059.193] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=3702) returned 1 [0059.193] CloseHandle (hObject=0x2fc) returned 1 [0059.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80 [0059.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80 [0059.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0059.193] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0059.193] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.193] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.193] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0059.195] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xe76, lpOverlapped=0x0) returned 1 [0059.196] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xe80, lpOverlapped=0x0) returned 1 [0059.197] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0059.197] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.197] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.198] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xe76, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xe76, lpOverlapped=0x0) returned 1 [0059.198] FlushFileBuffers (hFile=0x2fc) returned 1 [0059.199] FlushFileBuffers (hFile=0x340) returned 1 [0059.201] CloseHandle (hObject=0x2fc) returned 1 [0059.202] CloseHandle (hObject=0x340) returned 1 [0059.203] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 1 [0059.204] SetEvent (hEvent=0x284) returned 1 [0059.204] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0059.204] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=77022) returned 1 [0059.204] CloseHandle (hObject=0x340) returned 1 [0059.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80 [0059.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80 [0059.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0059.204] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0059.204] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.204] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.205] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0059.205] ReadFile (in: hFile=0x340, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x12cde, lpOverlapped=0x0) returned 1 [0059.207] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x12ce0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x12ce0, lpOverlapped=0x0) returned 1 [0059.210] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0059.210] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.210] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.210] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x12cde, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x12cde, lpOverlapped=0x0) returned 1 [0059.210] FlushFileBuffers (hFile=0x340) returned 1 [0059.543] FlushFileBuffers (hFile=0x2fc) returned 1 [0059.544] CloseHandle (hObject=0x340) returned 1 [0059.546] CloseHandle (hObject=0x2fc) returned 1 [0059.548] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 1 [0059.550] SetEvent (hEvent=0x284) returned 1 [0059.550] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0059.550] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=3526) returned 1 [0059.550] CloseHandle (hObject=0x2fc) returned 1 [0059.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80 [0059.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80 [0059.551] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0059.551] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0059.551] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.551] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.551] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0059.553] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xdc6, lpOverlapped=0x0) returned 1 [0059.554] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xdd0, lpOverlapped=0x0) returned 1 [0059.555] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0059.555] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.555] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.555] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xdc6, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xdc6, lpOverlapped=0x0) returned 1 [0059.555] FlushFileBuffers (hFile=0x2fc) returned 1 [0059.557] FlushFileBuffers (hFile=0x340) returned 1 [0059.558] CloseHandle (hObject=0x2fc) returned 1 [0059.559] CloseHandle (hObject=0x340) returned 1 [0059.563] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 1 [0059.564] SetEvent (hEvent=0x284) returned 1 [0059.565] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0059.565] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=82962) returned 1 [0059.565] CloseHandle (hObject=0x340) returned 1 [0059.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80 [0059.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80 [0059.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0059.565] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0059.565] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.565] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.565] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0059.565] ReadFile (in: hFile=0x340, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x14412, lpOverlapped=0x0) returned 1 [0059.568] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x14420, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x14420, lpOverlapped=0x0) returned 1 [0059.570] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0059.571] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.571] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.571] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x14412, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x14412, lpOverlapped=0x0) returned 1 [0059.572] FlushFileBuffers (hFile=0x340) returned 1 [0059.791] FlushFileBuffers (hFile=0x2fc) returned 1 [0059.792] CloseHandle (hObject=0x340) returned 1 [0059.794] CloseHandle (hObject=0x2fc) returned 1 [0059.796] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 1 [0059.798] SetEvent (hEvent=0x284) returned 1 [0059.798] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0059.799] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=6851) returned 1 [0059.799] CloseHandle (hObject=0x2fc) returned 1 [0059.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80 [0059.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80 [0059.799] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0059.799] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0059.799] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.800] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.800] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0059.801] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x1ac3, lpOverlapped=0x0) returned 1 [0059.803] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x1ad0, lpOverlapped=0x0) returned 1 [0059.804] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0059.804] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.804] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.804] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x1ac3, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x1ac3, lpOverlapped=0x0) returned 1 [0059.804] FlushFileBuffers (hFile=0x2fc) returned 1 [0059.806] FlushFileBuffers (hFile=0x340) returned 1 [0059.807] CloseHandle (hObject=0x2fc) returned 1 [0059.808] CloseHandle (hObject=0x340) returned 1 [0059.809] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 1 [0059.810] SetEvent (hEvent=0x284) returned 1 [0059.810] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0059.811] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=72076) returned 1 [0059.811] CloseHandle (hObject=0x340) returned 1 [0059.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80 [0059.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80 [0059.811] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0059.811] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0059.811] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.811] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0059.811] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0059.812] ReadFile (in: hFile=0x340, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x1198c, lpOverlapped=0x0) returned 1 [0059.814] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11990, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11990, lpOverlapped=0x0) returned 1 [0059.816] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0059.816] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.816] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0059.816] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x1198c, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x1198c, lpOverlapped=0x0) returned 1 [0059.817] FlushFileBuffers (hFile=0x340) returned 1 [0060.152] FlushFileBuffers (hFile=0x2fc) returned 1 [0060.153] CloseHandle (hObject=0x340) returned 1 [0060.155] CloseHandle (hObject=0x2fc) returned 1 [0060.159] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 1 [0060.161] SetEvent (hEvent=0x284) returned 1 [0060.161] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0060.166] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=4254) returned 1 [0060.166] CloseHandle (hObject=0x2fc) returned 1 [0060.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80 [0060.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80 [0060.167] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0060.167] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0060.167] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0060.167] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0060.167] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0060.169] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x109e, lpOverlapped=0x0) returned 1 [0060.170] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x10a0, lpOverlapped=0x0) returned 1 [0060.171] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0060.172] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0060.172] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0060.172] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x109e, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x109e, lpOverlapped=0x0) returned 1 [0060.172] FlushFileBuffers (hFile=0x2fc) returned 1 [0060.174] FlushFileBuffers (hFile=0x340) returned 1 [0060.175] CloseHandle (hObject=0x2fc) returned 1 [0060.176] CloseHandle (hObject=0x340) returned 1 [0060.179] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 1 [0060.180] SetEvent (hEvent=0x284) returned 1 [0060.181] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0060.181] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=86442) returned 1 [0060.181] CloseHandle (hObject=0x340) returned 1 [0060.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80 [0060.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80 [0060.181] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0060.181] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0060.181] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0060.181] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0060.181] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0060.181] ReadFile (in: hFile=0x340, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x151aa, lpOverlapped=0x0) returned 1 [0060.184] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x151b0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x151b0, lpOverlapped=0x0) returned 1 [0060.186] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0060.186] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0060.186] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0060.187] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x151aa, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x151aa, lpOverlapped=0x0) returned 1 [0060.187] FlushFileBuffers (hFile=0x340) returned 1 [0060.407] FlushFileBuffers (hFile=0x2fc) returned 1 [0060.416] CloseHandle (hObject=0x340) returned 1 [0060.422] CloseHandle (hObject=0x2fc) returned 1 [0060.427] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 1 [0060.429] SetEvent (hEvent=0x284) returned 1 [0060.429] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0060.472] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=3643) returned 1 [0060.472] CloseHandle (hObject=0x2fc) returned 1 [0060.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80 [0060.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80 [0060.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0060.472] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0060.472] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0060.472] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0060.472] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0060.474] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xe3b, lpOverlapped=0x0) returned 1 [0060.475] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xe40, lpOverlapped=0x0) returned 1 [0060.476] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0060.477] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0060.477] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0060.477] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xe3b, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xe3b, lpOverlapped=0x0) returned 1 [0060.477] FlushFileBuffers (hFile=0x2fc) returned 1 [0060.479] FlushFileBuffers (hFile=0x340) returned 1 [0060.480] CloseHandle (hObject=0x2fc) returned 1 [0060.484] CloseHandle (hObject=0x340) returned 1 [0060.485] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 1 [0060.486] SetEvent (hEvent=0x284) returned 1 [0060.486] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0060.486] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=80060) returned 1 [0060.486] CloseHandle (hObject=0x340) returned 1 [0060.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80 [0060.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80 [0060.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0060.486] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0060.486] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0060.486] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0060.487] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0060.487] ReadFile (in: hFile=0x340, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x138bc, lpOverlapped=0x0) returned 1 [0060.489] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x138c0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x138c0, lpOverlapped=0x0) returned 1 [0060.491] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0060.492] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0060.492] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0060.492] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x138bc, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x138bc, lpOverlapped=0x0) returned 1 [0060.492] FlushFileBuffers (hFile=0x340) returned 1 [0061.144] FlushFileBuffers (hFile=0x2fc) returned 1 [0061.162] CloseHandle (hObject=0x340) returned 1 [0061.167] CloseHandle (hObject=0x2fc) returned 1 [0061.169] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 1 [0061.170] SetEvent (hEvent=0x284) returned 1 [0061.170] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0061.172] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=18264) returned 1 [0061.172] CloseHandle (hObject=0x2fc) returned 1 [0061.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 0x80 [0061.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 0x80 [0061.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.172] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0061.173] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.173] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.173] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0061.173] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4758, lpOverlapped=0x0) returned 1 [0061.179] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4760, lpOverlapped=0x0) returned 1 [0061.180] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0061.181] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.181] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.181] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4758, lpOverlapped=0x0) returned 1 [0061.181] FlushFileBuffers (hFile=0x2fc) returned 1 [0061.378] FlushFileBuffers (hFile=0x340) returned 1 [0061.381] CloseHandle (hObject=0x2fc) returned 1 [0061.382] CloseHandle (hObject=0x340) returned 1 [0061.383] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 1 [0061.384] SetEvent (hEvent=0x284) returned 1 [0061.384] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0061.385] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=68226) returned 1 [0061.385] CloseHandle (hObject=0x340) returned 1 [0061.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80 [0061.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80 [0061.385] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.385] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0061.385] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.385] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.385] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0061.385] ReadFile (in: hFile=0x340, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x10a82, lpOverlapped=0x0) returned 1 [0061.388] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x10a90, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x10a90, lpOverlapped=0x0) returned 1 [0061.390] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0061.390] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.390] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.390] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x10a82, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x10a82, lpOverlapped=0x0) returned 1 [0061.391] FlushFileBuffers (hFile=0x340) returned 1 [0061.401] FlushFileBuffers (hFile=0x2fc) returned 1 [0061.402] CloseHandle (hObject=0x340) returned 1 [0061.404] CloseHandle (hObject=0x2fc) returned 1 [0061.407] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 1 [0061.408] SetEvent (hEvent=0x284) returned 1 [0061.408] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0061.408] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=12687) returned 1 [0061.408] CloseHandle (hObject=0x2fc) returned 1 [0061.408] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80 [0061.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80 [0061.409] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.409] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0061.409] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.409] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.409] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0061.411] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x318f, lpOverlapped=0x0) returned 1 [0061.412] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x3190, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x3190, lpOverlapped=0x0) returned 1 [0061.413] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0061.413] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.413] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.414] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x318f, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x318f, lpOverlapped=0x0) returned 1 [0061.414] FlushFileBuffers (hFile=0x2fc) returned 1 [0061.416] FlushFileBuffers (hFile=0x340) returned 1 [0061.419] CloseHandle (hObject=0x2fc) returned 1 [0061.420] CloseHandle (hObject=0x340) returned 1 [0061.421] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 1 [0061.422] SetEvent (hEvent=0x284) returned 1 [0061.423] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0061.423] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=65238) returned 1 [0061.423] CloseHandle (hObject=0x340) returned 1 [0061.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80 [0061.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80 [0061.423] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.423] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0061.423] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.423] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.423] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0061.423] ReadFile (in: hFile=0x340, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xfed6, lpOverlapped=0x0) returned 1 [0061.464] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xfee0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xfee0, lpOverlapped=0x0) returned 1 [0061.466] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0061.466] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.466] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.466] WriteFile (in: hFile=0x340, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xfed6, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xfed6, lpOverlapped=0x0) returned 1 [0061.467] FlushFileBuffers (hFile=0x340) returned 1 [0061.638] FlushFileBuffers (hFile=0x2fc) returned 1 [0061.641] CloseHandle (hObject=0x340) returned 1 [0061.643] CloseHandle (hObject=0x2fc) returned 1 [0061.645] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 1 [0061.646] SetEvent (hEvent=0x284) returned 1 [0061.646] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0061.647] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=3546) returned 1 [0061.647] CloseHandle (hObject=0x2fc) returned 1 [0061.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80 [0061.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80 [0061.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.647] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0061.648] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.648] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.648] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0061.652] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xdda, lpOverlapped=0x0) returned 1 [0061.656] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xde0, lpOverlapped=0x0) returned 1 [0061.657] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0061.657] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.657] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.657] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xdda, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xdda, lpOverlapped=0x0) returned 1 [0061.657] FlushFileBuffers (hFile=0x2fc) returned 1 [0061.666] FlushFileBuffers (hFile=0x2bc) returned 1 [0061.668] CloseHandle (hObject=0x2fc) returned 1 [0061.669] CloseHandle (hObject=0x2bc) returned 1 [0061.670] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 1 [0061.670] SetEvent (hEvent=0x284) returned 1 [0061.671] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0061.671] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=19288) returned 1 [0061.672] CloseHandle (hObject=0x2bc) returned 1 [0061.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 0x80 [0061.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 0x80 [0061.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.672] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0061.672] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.672] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.672] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0061.672] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4b58, lpOverlapped=0x0) returned 1 [0061.674] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4b60, lpOverlapped=0x0) returned 1 [0061.675] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0061.675] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.675] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.676] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4b58, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4b58, lpOverlapped=0x0) returned 1 [0061.676] FlushFileBuffers (hFile=0x2bc) returned 1 [0061.892] FlushFileBuffers (hFile=0x2fc) returned 1 [0061.894] CloseHandle (hObject=0x2bc) returned 1 [0061.895] CloseHandle (hObject=0x2fc) returned 1 [0061.896] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 1 [0061.897] SetEvent (hEvent=0x284) returned 1 [0061.897] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0061.897] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=17752) returned 1 [0061.897] CloseHandle (hObject=0x2fc) returned 1 [0061.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 0x80 [0061.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 0x80 [0061.897] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.898] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0061.898] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.898] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.898] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0061.898] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4558, lpOverlapped=0x0) returned 1 [0061.900] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4560, lpOverlapped=0x0) returned 1 [0061.901] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0061.901] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.901] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.901] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4558, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4558, lpOverlapped=0x0) returned 1 [0061.901] FlushFileBuffers (hFile=0x2fc) returned 1 [0061.964] FlushFileBuffers (hFile=0x2bc) returned 1 [0061.966] CloseHandle (hObject=0x2fc) returned 1 [0061.968] CloseHandle (hObject=0x2bc) returned 1 [0061.969] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 1 [0061.970] SetEvent (hEvent=0x284) returned 1 [0061.970] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0061.970] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=82374) returned 1 [0061.970] CloseHandle (hObject=0x2bc) returned 1 [0061.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80 [0061.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80 [0061.970] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.970] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0061.971] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.971] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0061.971] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0061.971] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x141c6, lpOverlapped=0x0) returned 1 [0061.974] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x141d0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x141d0, lpOverlapped=0x0) returned 1 [0061.976] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0061.977] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.977] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0061.977] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x141c6, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x141c6, lpOverlapped=0x0) returned 1 [0061.981] FlushFileBuffers (hFile=0x2bc) returned 1 [0062.034] FlushFileBuffers (hFile=0x2fc) returned 1 [0062.036] CloseHandle (hObject=0x2bc) returned 1 [0062.039] CloseHandle (hObject=0x2fc) returned 1 [0062.041] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 1 [0062.043] SetEvent (hEvent=0x284) returned 1 [0062.043] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0062.043] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=3683) returned 1 [0062.043] CloseHandle (hObject=0x2fc) returned 1 [0062.043] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80 [0062.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80 [0062.044] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.044] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0062.044] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.044] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.044] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0062.046] ReadFile (in: hFile=0x2fc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xe63, lpOverlapped=0x0) returned 1 [0062.048] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xe70, lpOverlapped=0x0) returned 1 [0062.049] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0062.049] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.049] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.049] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xe63, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xe63, lpOverlapped=0x0) returned 1 [0062.049] FlushFileBuffers (hFile=0x2fc) returned 1 [0062.063] FlushFileBuffers (hFile=0x2bc) returned 1 [0062.065] CloseHandle (hObject=0x2fc) returned 1 [0062.066] CloseHandle (hObject=0x2bc) returned 1 [0062.067] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 1 [0062.068] SetEvent (hEvent=0x284) returned 1 [0062.068] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0062.069] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=18264) returned 1 [0062.069] CloseHandle (hObject=0x2bc) returned 1 [0062.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 0x80 [0062.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 0x80 [0062.069] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.069] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0062.069] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.069] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.069] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0062.070] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4758, lpOverlapped=0x0) returned 1 [0062.073] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4760, lpOverlapped=0x0) returned 1 [0062.074] WriteFile (in: hFile=0x2fc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0062.074] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.075] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.075] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4758, lpOverlapped=0x0) returned 1 [0062.075] FlushFileBuffers (hFile=0x2bc) returned 1 [0062.110] FlushFileBuffers (hFile=0x2fc) returned 1 [0062.123] CloseHandle (hObject=0x2bc) returned 1 [0062.123] CloseHandle (hObject=0x2fc) returned 1 [0062.124] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 1 [0062.125] SetEvent (hEvent=0x284) returned 1 [0062.125] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0062.128] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=81482) returned 1 [0062.128] CloseHandle (hObject=0x2bc) returned 1 [0062.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80 [0062.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80 [0062.128] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.128] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0062.128] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.128] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.128] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0062.129] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x13e4a, lpOverlapped=0x0) returned 1 [0062.135] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x13e50, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x13e50, lpOverlapped=0x0) returned 1 [0062.137] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0062.138] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.138] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.138] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x13e4a, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x13e4a, lpOverlapped=0x0) returned 1 [0062.138] FlushFileBuffers (hFile=0x2bc) returned 1 [0062.187] FlushFileBuffers (hFile=0x2f8) returned 1 [0062.191] CloseHandle (hObject=0x2bc) returned 1 [0062.193] CloseHandle (hObject=0x2f8) returned 1 [0062.195] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 1 [0062.197] SetEvent (hEvent=0x284) returned 1 [0062.197] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0062.197] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=3865) returned 1 [0062.197] CloseHandle (hObject=0x2f8) returned 1 [0062.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80 [0062.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80 [0062.197] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.198] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0062.198] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.198] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.198] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0062.200] ReadFile (in: hFile=0x2f8, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xf19, lpOverlapped=0x0) returned 1 [0062.206] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf20, lpOverlapped=0x0) returned 1 [0062.207] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0062.207] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.208] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.208] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf19, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xf19, lpOverlapped=0x0) returned 1 [0062.208] FlushFileBuffers (hFile=0x2f8) returned 1 [0062.216] FlushFileBuffers (hFile=0x2bc) returned 1 [0062.217] CloseHandle (hObject=0x2f8) returned 1 [0062.218] CloseHandle (hObject=0x2bc) returned 1 [0062.219] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 1 [0062.220] SetEvent (hEvent=0x284) returned 1 [0062.220] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0062.220] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=17752) returned 1 [0062.220] CloseHandle (hObject=0x2bc) returned 1 [0062.220] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 0x80 [0062.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 0x80 [0062.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.221] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0062.221] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.221] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.221] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0062.221] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4558, lpOverlapped=0x0) returned 1 [0062.224] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4560, lpOverlapped=0x0) returned 1 [0062.225] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0062.226] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.226] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.226] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4558, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4558, lpOverlapped=0x0) returned 1 [0062.226] FlushFileBuffers (hFile=0x2bc) returned 1 [0062.669] FlushFileBuffers (hFile=0x2f8) returned 1 [0062.671] CloseHandle (hObject=0x2bc) returned 1 [0062.672] CloseHandle (hObject=0x2f8) returned 1 [0062.674] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 1 [0062.675] SetEvent (hEvent=0x284) returned 1 [0062.675] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0062.675] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=17752) returned 1 [0062.675] CloseHandle (hObject=0x2f8) returned 1 [0062.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 0x80 [0062.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 0x80 [0062.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.676] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0062.676] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.676] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.676] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0062.676] ReadFile (in: hFile=0x2f8, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4558, lpOverlapped=0x0) returned 1 [0062.679] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4560, lpOverlapped=0x0) returned 1 [0062.680] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0062.680] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.680] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.680] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4558, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4558, lpOverlapped=0x0) returned 1 [0062.680] FlushFileBuffers (hFile=0x2f8) returned 1 [0062.852] FlushFileBuffers (hFile=0x2bc) returned 1 [0062.854] CloseHandle (hObject=0x2f8) returned 1 [0062.855] CloseHandle (hObject=0x2bc) returned 1 [0062.856] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 1 [0062.857] SetEvent (hEvent=0x284) returned 1 [0062.857] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0062.857] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=60684) returned 1 [0062.857] CloseHandle (hObject=0x2bc) returned 1 [0062.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80 [0062.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80 [0062.858] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.858] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0062.858] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.858] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.858] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0062.858] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xed0c, lpOverlapped=0x0) returned 1 [0062.860] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xed10, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xed10, lpOverlapped=0x0) returned 1 [0062.862] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0062.863] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.863] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.863] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xed0c, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xed0c, lpOverlapped=0x0) returned 1 [0062.863] FlushFileBuffers (hFile=0x2bc) returned 1 [0062.880] FlushFileBuffers (hFile=0x2f8) returned 1 [0062.886] CloseHandle (hObject=0x2bc) returned 1 [0062.888] CloseHandle (hObject=0x2f8) returned 1 [0062.890] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 1 [0062.891] SetEvent (hEvent=0x284) returned 1 [0062.891] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0062.892] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=4015) returned 1 [0062.892] CloseHandle (hObject=0x2f8) returned 1 [0062.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80 [0062.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80 [0062.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.893] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0062.893] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.893] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.893] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0062.895] ReadFile (in: hFile=0x2f8, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xfaf, lpOverlapped=0x0) returned 1 [0062.897] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xfb0, lpOverlapped=0x0) returned 1 [0062.898] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0062.898] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.898] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.898] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xfaf, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xfaf, lpOverlapped=0x0) returned 1 [0062.898] FlushFileBuffers (hFile=0x2f8) returned 1 [0062.912] FlushFileBuffers (hFile=0x2bc) returned 1 [0062.913] CloseHandle (hObject=0x2f8) returned 1 [0062.915] CloseHandle (hObject=0x2bc) returned 1 [0062.915] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 1 [0062.916] SetEvent (hEvent=0x284) returned 1 [0062.916] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0062.917] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=18776) returned 1 [0062.917] CloseHandle (hObject=0x2bc) returned 1 [0062.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 0x80 [0062.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 0x80 [0062.917] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.917] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0062.917] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.917] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0062.917] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0062.917] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4958, lpOverlapped=0x0) returned 1 [0062.921] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4960, lpOverlapped=0x0) returned 1 [0062.922] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0062.922] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.923] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0062.923] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4958, lpOverlapped=0x0) returned 1 [0062.923] FlushFileBuffers (hFile=0x2bc) returned 1 [0063.136] FlushFileBuffers (hFile=0x2f8) returned 1 [0063.141] CloseHandle (hObject=0x2bc) returned 1 [0063.141] CloseHandle (hObject=0x2f8) returned 1 [0063.142] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 1 [0063.143] SetEvent (hEvent=0x284) returned 1 [0063.143] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0063.144] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=60816) returned 1 [0063.144] CloseHandle (hObject=0x2f8) returned 1 [0063.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80 [0063.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80 [0063.144] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.144] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0063.144] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.144] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.144] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0063.145] ReadFile (in: hFile=0x2f8, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xed90, lpOverlapped=0x0) returned 1 [0063.148] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xeda0, lpOverlapped=0x0) returned 1 [0063.149] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0063.149] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0063.150] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0063.150] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xed90, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xed90, lpOverlapped=0x0) returned 1 [0063.150] FlushFileBuffers (hFile=0x2f8) returned 1 [0063.295] FlushFileBuffers (hFile=0x2bc) returned 1 [0063.297] CloseHandle (hObject=0x2f8) returned 1 [0063.298] CloseHandle (hObject=0x2bc) returned 1 [0063.300] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 1 [0063.301] SetEvent (hEvent=0x284) returned 1 [0063.301] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0063.301] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=3069) returned 1 [0063.301] CloseHandle (hObject=0x2bc) returned 1 [0063.301] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 0x80 [0063.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 0x80 [0063.302] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.302] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0063.302] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.302] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.302] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0063.304] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xbfd, lpOverlapped=0x0) returned 1 [0063.305] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xc00, lpOverlapped=0x0) returned 1 [0063.306] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0063.307] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0063.307] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0063.307] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xbfd, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xbfd, lpOverlapped=0x0) returned 1 [0063.307] FlushFileBuffers (hFile=0x2bc) returned 1 [0063.309] FlushFileBuffers (hFile=0x2f8) returned 1 [0063.311] CloseHandle (hObject=0x2bc) returned 1 [0063.312] CloseHandle (hObject=0x2f8) returned 1 [0063.312] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 1 [0063.313] SetEvent (hEvent=0x284) returned 1 [0063.313] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0063.314] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=79996) returned 1 [0063.314] CloseHandle (hObject=0x2f8) returned 1 [0063.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 0x80 [0063.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 0x80 [0063.314] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.314] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0063.314] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.314] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.314] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0063.314] ReadFile (in: hFile=0x2f8, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x1387c, lpOverlapped=0x0) returned 1 [0063.317] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x13880, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x13880, lpOverlapped=0x0) returned 1 [0063.319] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0063.320] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0063.320] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0063.320] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x1387c, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x1387c, lpOverlapped=0x0) returned 1 [0063.320] FlushFileBuffers (hFile=0x2f8) returned 1 [0063.374] FlushFileBuffers (hFile=0x2bc) returned 1 [0063.375] CloseHandle (hObject=0x2f8) returned 1 [0063.378] CloseHandle (hObject=0x2bc) returned 1 [0063.380] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 1 [0063.381] SetEvent (hEvent=0x284) returned 1 [0063.382] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0063.382] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=201796) returned 1 [0063.382] CloseHandle (hObject=0x2bc) returned 1 [0063.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 0x80 [0063.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 0x80 [0063.382] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.382] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0063.382] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.382] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.382] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0063.383] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x31444, lpOverlapped=0x0) returned 1 [0063.387] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x31450, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x31450, lpOverlapped=0x0) returned 1 [0063.390] WriteFile (in: hFile=0x2f8, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0063.391] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0063.391] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0063.391] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x31444, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x31444, lpOverlapped=0x0) returned 1 [0063.391] FlushFileBuffers (hFile=0x2bc) returned 1 [0063.397] FlushFileBuffers (hFile=0x2f8) returned 1 [0063.406] CloseHandle (hObject=0x2bc) returned 1 [0063.410] CloseHandle (hObject=0x2f8) returned 1 [0063.415] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 1 [0063.419] SetEvent (hEvent=0x284) returned 1 [0063.419] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0063.419] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=16118) returned 1 [0063.419] CloseHandle (hObject=0x2bc) returned 1 [0063.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 0x80 [0063.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 0x80 [0063.419] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.419] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0063.419] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.419] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.419] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x308 [0063.420] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x3ef6, lpOverlapped=0x0) returned 1 [0063.425] WriteFile (in: hFile=0x308, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x3f00, lpOverlapped=0x0) returned 1 [0063.426] WriteFile (in: hFile=0x308, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0063.426] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0063.427] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0063.427] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x3ef6, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x3ef6, lpOverlapped=0x0) returned 1 [0063.427] FlushFileBuffers (hFile=0x2bc) returned 1 [0063.521] FlushFileBuffers (hFile=0x308) returned 1 [0063.525] CloseHandle (hObject=0x2bc) returned 1 [0063.536] CloseHandle (hObject=0x308) returned 1 [0063.538] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 1 [0063.539] SetEvent (hEvent=0x284) returned 1 [0063.539] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0063.539] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=93314) returned 1 [0063.539] CloseHandle (hObject=0x308) returned 1 [0063.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 0x80 [0063.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 0x80 [0063.539] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.539] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0063.539] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.540] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.540] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0063.540] ReadFile (in: hFile=0x308, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x16c82, lpOverlapped=0x0) returned 1 [0063.543] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x16c90, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x16c90, lpOverlapped=0x0) returned 1 [0063.545] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0063.546] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0063.546] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0063.546] WriteFile (in: hFile=0x308, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x16c82, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x16c82, lpOverlapped=0x0) returned 1 [0063.546] FlushFileBuffers (hFile=0x308) returned 1 [0063.770] FlushFileBuffers (hFile=0x2bc) returned 1 [0063.773] CloseHandle (hObject=0x308) returned 1 [0063.776] CloseHandle (hObject=0x2bc) returned 1 [0063.793] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 1 [0063.794] SetEvent (hEvent=0x284) returned 1 [0063.802] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0063.806] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=1150) returned 1 [0063.806] CloseHandle (hObject=0x2bc) returned 1 [0063.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 0x80 [0063.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 0x80 [0063.806] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.806] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0063.806] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.806] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0063.807] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x308 [0063.807] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x47e, lpOverlapped=0x0) returned 1 [0064.057] WriteFile (in: hFile=0x308, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x480, lpOverlapped=0x0) returned 1 [0064.058] WriteFile (in: hFile=0x308, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0064.058] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.058] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.058] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x47e, lpOverlapped=0x0) returned 1 [0064.058] FlushFileBuffers (hFile=0x2bc) returned 1 [0064.297] FlushFileBuffers (hFile=0x308) returned 1 [0064.304] CloseHandle (hObject=0x2bc) returned 1 [0064.305] CloseHandle (hObject=0x308) returned 1 [0064.306] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 1 [0064.307] SetEvent (hEvent=0x284) returned 1 [0064.307] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0064.308] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=894) returned 1 [0064.308] CloseHandle (hObject=0x308) returned 1 [0064.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 0x80 [0064.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 0x80 [0064.309] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.309] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0064.309] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.309] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.309] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0064.309] ReadFile (in: hFile=0x308, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x37e, lpOverlapped=0x0) returned 1 [0064.312] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x380, lpOverlapped=0x0) returned 1 [0064.313] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0064.313] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.313] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.313] WriteFile (in: hFile=0x308, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x37e, lpOverlapped=0x0) returned 1 [0064.313] FlushFileBuffers (hFile=0x308) returned 1 [0064.326] FlushFileBuffers (hFile=0x2bc) returned 1 [0064.327] CloseHandle (hObject=0x308) returned 1 [0064.327] CloseHandle (hObject=0x2bc) returned 1 [0064.328] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 1 [0064.329] SetEvent (hEvent=0x284) returned 1 [0064.329] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0064.330] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=894) returned 1 [0064.330] CloseHandle (hObject=0x2bc) returned 1 [0064.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 0x80 [0064.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 0x80 [0064.330] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.330] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0064.330] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.330] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.330] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x308 [0064.330] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x37e, lpOverlapped=0x0) returned 1 [0064.332] WriteFile (in: hFile=0x308, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x380, lpOverlapped=0x0) returned 1 [0064.333] WriteFile (in: hFile=0x308, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0064.333] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.333] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.333] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x37e, lpOverlapped=0x0) returned 1 [0064.333] FlushFileBuffers (hFile=0x2bc) returned 1 [0064.335] FlushFileBuffers (hFile=0x308) returned 1 [0064.336] CloseHandle (hObject=0x2bc) returned 1 [0064.336] CloseHandle (hObject=0x308) returned 1 [0064.338] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 1 [0064.339] SetEvent (hEvent=0x284) returned 1 [0064.339] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0064.339] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=894) returned 1 [0064.339] CloseHandle (hObject=0x308) returned 1 [0064.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 0x80 [0064.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 0x80 [0064.342] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.342] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0064.342] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.342] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.342] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0064.343] ReadFile (in: hFile=0x308, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x37e, lpOverlapped=0x0) returned 1 [0064.344] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x380, lpOverlapped=0x0) returned 1 [0064.345] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0064.345] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.345] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.345] WriteFile (in: hFile=0x308, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x37e, lpOverlapped=0x0) returned 1 [0064.346] FlushFileBuffers (hFile=0x308) returned 1 [0064.349] FlushFileBuffers (hFile=0x2bc) returned 1 [0064.350] CloseHandle (hObject=0x308) returned 1 [0064.351] CloseHandle (hObject=0x2bc) returned 1 [0064.351] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 1 [0064.352] SetEvent (hEvent=0x284) returned 1 [0064.352] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0064.353] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=894) returned 1 [0064.353] CloseHandle (hObject=0x2bc) returned 1 [0064.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 0x80 [0064.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 0x80 [0064.353] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.353] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0064.353] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.353] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.353] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x308 [0064.353] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x37e, lpOverlapped=0x0) returned 1 [0064.355] WriteFile (in: hFile=0x308, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x380, lpOverlapped=0x0) returned 1 [0064.356] WriteFile (in: hFile=0x308, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0064.356] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.356] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.356] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x37e, lpOverlapped=0x0) returned 1 [0064.357] FlushFileBuffers (hFile=0x2bc) returned 1 [0064.358] FlushFileBuffers (hFile=0x308) returned 1 [0064.359] CloseHandle (hObject=0x2bc) returned 1 [0064.360] CloseHandle (hObject=0x308) returned 1 [0064.360] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 1 [0064.361] SetEvent (hEvent=0x284) returned 1 [0064.361] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0064.363] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=894) returned 1 [0064.363] CloseHandle (hObject=0x2bc) returned 1 [0064.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 0x80 [0064.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 0x80 [0064.363] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.363] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0064.363] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.363] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.363] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c [0064.363] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x37e, lpOverlapped=0x0) returned 1 [0064.365] WriteFile (in: hFile=0x34c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x380, lpOverlapped=0x0) returned 1 [0064.366] WriteFile (in: hFile=0x34c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0064.366] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.366] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.366] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x37e, lpOverlapped=0x0) returned 1 [0064.366] FlushFileBuffers (hFile=0x2bc) returned 1 [0064.368] FlushFileBuffers (hFile=0x34c) returned 1 [0064.369] CloseHandle (hObject=0x2bc) returned 1 [0064.369] CloseHandle (hObject=0x34c) returned 1 [0064.370] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 1 [0064.371] SetEvent (hEvent=0x284) returned 1 [0064.371] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x34c [0064.372] GetFileSizeEx (in: hFile=0x34c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=1150) returned 1 [0064.372] CloseHandle (hObject=0x34c) returned 1 [0064.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 0x80 [0064.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 0x80 [0064.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.372] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x34c [0064.372] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.372] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.372] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0064.374] ReadFile (in: hFile=0x34c, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x47e, lpOverlapped=0x0) returned 1 [0064.376] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x480, lpOverlapped=0x0) returned 1 [0064.377] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0064.377] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.377] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.377] WriteFile (in: hFile=0x34c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x47e, lpOverlapped=0x0) returned 1 [0064.377] FlushFileBuffers (hFile=0x34c) returned 1 [0064.379] FlushFileBuffers (hFile=0x2bc) returned 1 [0064.381] CloseHandle (hObject=0x34c) returned 1 [0064.381] CloseHandle (hObject=0x2bc) returned 1 [0064.382] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 1 [0064.383] SetEvent (hEvent=0x284) returned 1 [0064.383] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0064.383] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=36710) returned 1 [0064.383] CloseHandle (hObject=0x2bc) returned 1 [0064.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 0x80 [0064.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 0x80 [0064.383] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.383] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0064.383] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.383] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.383] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c [0064.384] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x8f66, lpOverlapped=0x0) returned 1 [0064.386] WriteFile (in: hFile=0x34c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x8f70, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x8f70, lpOverlapped=0x0) returned 1 [0064.387] WriteFile (in: hFile=0x34c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0064.387] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.387] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.387] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x8f66, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x8f66, lpOverlapped=0x0) returned 1 [0064.388] FlushFileBuffers (hFile=0x2bc) returned 1 [0064.389] FlushFileBuffers (hFile=0x34c) returned 1 [0064.390] CloseHandle (hObject=0x2bc) returned 1 [0064.392] CloseHandle (hObject=0x34c) returned 1 [0064.393] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 1 [0064.394] SetEvent (hEvent=0x284) returned 1 [0064.394] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x34c [0064.394] GetFileSizeEx (in: hFile=0x34c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=10134) returned 1 [0064.394] CloseHandle (hObject=0x34c) returned 1 [0064.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 0x80 [0064.394] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 0x80 [0064.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.395] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x34c [0064.395] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.395] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0064.395] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0064.395] ReadFile (in: hFile=0x34c, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x2796, lpOverlapped=0x0) returned 1 [0064.397] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x27a0, lpOverlapped=0x0) returned 1 [0064.398] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0064.398] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.398] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0064.398] WriteFile (in: hFile=0x34c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x2796, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x2796, lpOverlapped=0x0) returned 1 [0064.398] FlushFileBuffers (hFile=0x34c) returned 1 [0064.755] FlushFileBuffers (hFile=0x2bc) returned 1 [0064.759] CloseHandle (hObject=0x34c) returned 1 [0064.760] CloseHandle (hObject=0x2bc) returned 1 [0064.761] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 1 [0064.762] SetEvent (hEvent=0x284) returned 1 [0064.762] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0064.762] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=181483595) returned 1 [0064.762] CloseHandle (hObject=0x2bc) returned 1 [0064.762] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz")) returned 0x80 [0064.762] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 1 [0064.763] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core.mzz.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0064.763] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0064.763] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0064.763] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x546fbbc, lpOverlapped=0x0 | out: lpBuffer=0x55f6058*, lpNumberOfBytesRead=0x546fbbc*=0x40000, lpOverlapped=0x0) returned 1 [0064.771] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x39b12c3, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0064.771] ReadFile (in: hFile=0x2bc, lpBuffer=0x5636058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x546fbbc, lpOverlapped=0x0 | out: lpBuffer=0x5636058*, lpNumberOfBytesRead=0x546fbbc*=0x40000, lpOverlapped=0x0) returned 1 [0064.855] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0xacd384b, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0064.855] ReadFile (in: hFile=0x2bc, lpBuffer=0x5676058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x546fbbc, lpOverlapped=0x0 | out: lpBuffer=0x5676058*, lpNumberOfBytesRead=0x546fbbc*=0x40000, lpOverlapped=0x0) returned 1 [0064.869] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd20 | out: lpNewFilePointer=0x0) returned 1 [0064.869] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x546fd18, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd18*=0xc0112, lpOverlapped=0x0) returned 1 [0065.084] SetEndOfFile (hFile=0x2bc) returned 1 [0065.085] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0xacd384b, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb8 | out: lpNewFilePointer=0x0) returned 1 [0065.085] WriteFile (in: hFile=0x2bc, lpBuffer=0x56b614a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x546fbc4, lpOverlapped=0x0 | out: lpBuffer=0x56b614a*, lpNumberOfBytesWritten=0x546fbc4*=0x40000, lpOverlapped=0x0) returned 1 [0065.086] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x39b12c3, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb8 | out: lpNewFilePointer=0x0) returned 1 [0065.086] WriteFile (in: hFile=0x2bc, lpBuffer=0x56b614a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x546fbc4, lpOverlapped=0x0 | out: lpBuffer=0x56b614a*, lpNumberOfBytesWritten=0x546fbc4*=0x40000, lpOverlapped=0x0) returned 1 [0065.087] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb8 | out: lpNewFilePointer=0x0) returned 1 [0065.087] WriteFile (in: hFile=0x2bc, lpBuffer=0x56b614a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x546fbc4, lpOverlapped=0x0 | out: lpBuffer=0x56b614a*, lpNumberOfBytesWritten=0x546fbc4*=0x40000, lpOverlapped=0x0) returned 1 [0065.088] FlushFileBuffers (hFile=0x2bc) returned 1 [0065.107] CloseHandle (hObject=0x2bc) returned 1 [0066.528] SetEvent (hEvent=0x284) returned 1 [0066.528] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0066.529] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=1163264) returned 1 [0066.529] CloseHandle (hObject=0x33c) returned 1 [0066.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 0x80 [0066.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 0x80 [0066.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0066.529] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0066.529] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0066.529] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0066.529] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x368 [0066.530] ReadFile (in: hFile=0x33c, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x110100, lpOverlapped=0x0) returned 1 [0066.559] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x110100, lpOverlapped=0x0) returned 1 [0066.699] ReadFile (in: hFile=0x33c, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xbf00, lpOverlapped=0x0) returned 1 [0066.700] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xbf10, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xbf10, lpOverlapped=0x0) returned 1 [0066.701] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0066.701] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0066.701] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0066.701] WriteFile (in: hFile=0x33c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x110102, lpOverlapped=0x0) returned 1 [0066.706] WriteFile (in: hFile=0x33c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xbefe, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xbefe, lpOverlapped=0x0) returned 1 [0066.706] FlushFileBuffers (hFile=0x33c) returned 1 [0067.462] FlushFileBuffers (hFile=0x368) returned 1 [0067.487] CloseHandle (hObject=0x33c) returned 1 [0067.507] CloseHandle (hObject=0x368) returned 1 [0067.613] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 1 [0067.717] SetEvent (hEvent=0x284) returned 1 [0067.718] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0067.719] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=872448) returned 1 [0067.719] CloseHandle (hObject=0x318) returned 1 [0067.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 0x80 [0067.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 0x80 [0067.719] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0067.719] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0067.719] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0067.719] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0067.719] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354 [0067.719] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xd5000, lpOverlapped=0x0) returned 1 [0067.735] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xd5010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xd5010, lpOverlapped=0x0) returned 1 [0067.750] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0067.750] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0067.750] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0067.751] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xd5000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xd5000, lpOverlapped=0x0) returned 1 [0067.844] FlushFileBuffers (hFile=0x318) returned 1 [0068.064] FlushFileBuffers (hFile=0x354) returned 1 [0068.066] CloseHandle (hObject=0x318) returned 1 [0068.082] CloseHandle (hObject=0x354) returned 1 [0068.099] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 1 [0068.107] SetEvent (hEvent=0x284) returned 1 [0068.107] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0068.107] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=495616) returned 1 [0068.107] CloseHandle (hObject=0x354) returned 1 [0068.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 0x80 [0068.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 0x80 [0068.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0068.107] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0068.108] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0068.108] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0068.108] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x318 [0068.108] ReadFile (in: hFile=0x354, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x79000, lpOverlapped=0x0) returned 1 [0068.205] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x79010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x79010, lpOverlapped=0x0) returned 1 [0068.214] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0068.214] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0068.214] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0068.214] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x79000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x79000, lpOverlapped=0x0) returned 1 [0068.215] FlushFileBuffers (hFile=0x354) returned 1 [0068.476] FlushFileBuffers (hFile=0x318) returned 1 [0068.477] CloseHandle (hObject=0x354) returned 1 [0068.486] CloseHandle (hObject=0x318) returned 1 [0068.495] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 1 [0068.500] SetEvent (hEvent=0x284) returned 1 [0068.500] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0068.501] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=272046) returned 1 [0068.501] CloseHandle (hObject=0x318) returned 1 [0068.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 0x80 [0068.505] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 0x80 [0068.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0068.506] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0068.506] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0068.506] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0068.506] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354 [0068.506] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x426ae, lpOverlapped=0x0) returned 1 [0068.512] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x426b0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x426b0, lpOverlapped=0x0) returned 1 [0068.613] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0068.613] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0068.613] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0068.613] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x426ae, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x426ae, lpOverlapped=0x0) returned 1 [0068.614] FlushFileBuffers (hFile=0x318) returned 1 [0068.618] FlushFileBuffers (hFile=0x354) returned 1 [0068.622] CloseHandle (hObject=0x318) returned 1 [0068.628] CloseHandle (hObject=0x354) returned 1 [0068.633] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 1 [0068.637] SetEvent (hEvent=0x284) returned 1 [0068.637] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0068.637] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=94720) returned 1 [0068.637] CloseHandle (hObject=0x354) returned 1 [0068.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 0x80 [0068.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 0x80 [0068.637] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0068.637] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0068.637] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0068.637] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0068.637] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x318 [0068.640] ReadFile (in: hFile=0x354, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x17200, lpOverlapped=0x0) returned 1 [0068.643] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x17210, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x17210, lpOverlapped=0x0) returned 1 [0068.645] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0068.645] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0068.645] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0068.645] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x17200, lpOverlapped=0x0) returned 1 [0068.646] FlushFileBuffers (hFile=0x354) returned 1 [0068.660] FlushFileBuffers (hFile=0x318) returned 1 [0068.681] CloseHandle (hObject=0x354) returned 1 [0068.683] CloseHandle (hObject=0x318) returned 1 [0068.686] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 1 [0068.687] SetEvent (hEvent=0x284) returned 1 [0068.687] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0068.688] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=807256) returned 1 [0068.688] CloseHandle (hObject=0x318) returned 1 [0068.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 0x80 [0068.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 0x80 [0068.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0068.703] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0068.703] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0068.703] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0068.703] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354 [0068.704] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xc5158, lpOverlapped=0x0) returned 1 [0068.739] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xc5160, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xc5160, lpOverlapped=0x0) returned 1 [0068.916] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0068.916] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0068.916] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0068.916] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xc5158, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xc5158, lpOverlapped=0x0) returned 1 [0068.920] FlushFileBuffers (hFile=0x318) returned 1 [0069.112] FlushFileBuffers (hFile=0x354) returned 1 [0069.115] CloseHandle (hObject=0x318) returned 1 [0069.132] CloseHandle (hObject=0x354) returned 1 [0069.147] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 1 [0069.154] SetEvent (hEvent=0x284) returned 1 [0069.154] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0069.155] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=30120) returned 1 [0069.155] CloseHandle (hObject=0x354) returned 1 [0069.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 0x80 [0069.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 0x80 [0069.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0069.155] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0069.155] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0069.155] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0069.155] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x318 [0069.155] ReadFile (in: hFile=0x354, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x75a8, lpOverlapped=0x0) returned 1 [0069.347] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x75b0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x75b0, lpOverlapped=0x0) returned 1 [0069.349] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0069.349] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0069.349] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0069.349] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x75a8, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x75a8, lpOverlapped=0x0) returned 1 [0069.349] FlushFileBuffers (hFile=0x354) returned 1 [0069.606] FlushFileBuffers (hFile=0x318) returned 1 [0069.607] CloseHandle (hObject=0x354) returned 1 [0069.609] CloseHandle (hObject=0x318) returned 1 [0069.611] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 1 [0069.612] SetEvent (hEvent=0x284) returned 1 [0069.613] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0069.613] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=144416) returned 1 [0069.613] CloseHandle (hObject=0x318) returned 1 [0069.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 0x80 [0069.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 0x80 [0069.613] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0069.613] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0069.613] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0069.613] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0069.614] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354 [0069.614] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x23420, lpOverlapped=0x0) returned 1 [0069.617] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x23430, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x23430, lpOverlapped=0x0) returned 1 [0069.620] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0069.620] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0069.620] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0069.620] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x23420, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x23420, lpOverlapped=0x0) returned 1 [0069.620] FlushFileBuffers (hFile=0x318) returned 1 [0069.695] FlushFileBuffers (hFile=0x354) returned 1 [0069.757] CloseHandle (hObject=0x318) returned 1 [0069.760] CloseHandle (hObject=0x354) returned 1 [0069.763] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 1 [0069.765] SetEvent (hEvent=0x284) returned 1 [0069.765] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0069.765] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=38898) returned 1 [0069.765] CloseHandle (hObject=0x354) returned 1 [0069.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 0x80 [0069.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 0x80 [0069.765] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0069.766] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0069.766] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0069.766] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0069.766] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x318 [0069.766] ReadFile (in: hFile=0x354, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x97f2, lpOverlapped=0x0) returned 1 [0069.768] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x9800, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x9800, lpOverlapped=0x0) returned 1 [0069.770] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0069.770] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0069.770] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0069.770] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x97f2, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x97f2, lpOverlapped=0x0) returned 1 [0069.770] FlushFileBuffers (hFile=0x354) returned 1 [0069.976] FlushFileBuffers (hFile=0x318) returned 1 [0069.977] CloseHandle (hObject=0x354) returned 1 [0069.979] CloseHandle (hObject=0x318) returned 1 [0069.980] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 1 [0069.982] SetEvent (hEvent=0x284) returned 1 [0069.982] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0069.986] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=5198099) returned 1 [0069.986] CloseHandle (hObject=0x354) returned 1 [0069.986] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu")) returned 0x80 [0069.986] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 1 [0069.986] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0069.987] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0069.987] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0069.987] ReadFile (in: hFile=0x354, lpBuffer=0x55f6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x546fbbc, lpOverlapped=0x0 | out: lpBuffer=0x55f6058*, lpNumberOfBytesRead=0x546fbbc*=0x40000, lpOverlapped=0x0) returned 1 [0069.990] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x1a705b, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0069.991] ReadFile (in: hFile=0x354, lpBuffer=0x5636058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x546fbbc, lpOverlapped=0x0 | out: lpBuffer=0x5636058*, lpNumberOfBytesRead=0x546fbbc*=0x40000, lpOverlapped=0x0) returned 1 [0069.994] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x4b5113, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0069.994] ReadFile (in: hFile=0x354, lpBuffer=0x5676058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x546fbbc, lpOverlapped=0x0 | out: lpBuffer=0x5676058*, lpNumberOfBytesRead=0x546fbbc*=0x40000, lpOverlapped=0x0) returned 1 [0070.083] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd20 | out: lpNewFilePointer=0x0) returned 1 [0070.083] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x546fd18, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd18*=0xc0132, lpOverlapped=0x0) returned 1 [0070.106] SetEndOfFile (hFile=0x354) returned 1 [0070.106] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x4b5113, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb8 | out: lpNewFilePointer=0x0) returned 1 [0070.106] WriteFile (in: hFile=0x354, lpBuffer=0x56b616a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x546fbc4, lpOverlapped=0x0 | out: lpBuffer=0x56b616a*, lpNumberOfBytesWritten=0x546fbc4*=0x40000, lpOverlapped=0x0) returned 1 [0070.108] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x1a705b, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb8 | out: lpNewFilePointer=0x0) returned 1 [0070.108] WriteFile (in: hFile=0x354, lpBuffer=0x56b616a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x546fbc4, lpOverlapped=0x0 | out: lpBuffer=0x56b616a*, lpNumberOfBytesWritten=0x546fbc4*=0x40000, lpOverlapped=0x0) returned 1 [0070.110] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb8 | out: lpNewFilePointer=0x0) returned 1 [0070.110] WriteFile (in: hFile=0x354, lpBuffer=0x56b616a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x546fbc4, lpOverlapped=0x0 | out: lpBuffer=0x56b616a*, lpNumberOfBytesWritten=0x546fbc4*=0x40000, lpOverlapped=0x0) returned 1 [0070.299] FlushFileBuffers (hFile=0x354) returned 1 [0070.961] CloseHandle (hObject=0x354) returned 1 [0072.027] SetEvent (hEvent=0x284) returned 1 [0072.028] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0072.028] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=2141433) returned 1 [0072.028] CloseHandle (hObject=0x354) returned 1 [0072.033] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu")) returned 0x80 [0072.033] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 1 [0072.034] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x354 [0072.034] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0072.034] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0072.034] ReadFile (in: hFile=0x354, lpBuffer=0x55f6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x546fbbc, lpOverlapped=0x0 | out: lpBuffer=0x55f6058*, lpNumberOfBytesRead=0x546fbbc*=0x40000, lpOverlapped=0x0) returned 1 [0072.039] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0xae453, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0072.039] ReadFile (in: hFile=0x354, lpBuffer=0x5636058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x546fbbc, lpOverlapped=0x0 | out: lpBuffer=0x5636058*, lpNumberOfBytesRead=0x546fbbc*=0x40000, lpOverlapped=0x0) returned 1 [0072.045] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x1cacf9, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0072.045] ReadFile (in: hFile=0x354, lpBuffer=0x5676058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x546fbbc, lpOverlapped=0x0 | out: lpBuffer=0x5676058*, lpNumberOfBytesRead=0x546fbbc*=0x40000, lpOverlapped=0x0) returned 1 [0072.066] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd20 | out: lpNewFilePointer=0x0) returned 1 [0072.066] WriteFile (in: hFile=0x354, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x546fd18, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd18*=0xc0132, lpOverlapped=0x0) returned 1 [0072.078] SetEndOfFile (hFile=0x354) returned 1 [0072.079] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x1cacf9, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb8 | out: lpNewFilePointer=0x0) returned 1 [0072.079] WriteFile (in: hFile=0x354, lpBuffer=0x56b616a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x546fbc4, lpOverlapped=0x0 | out: lpBuffer=0x56b616a*, lpNumberOfBytesWritten=0x546fbc4*=0x40000, lpOverlapped=0x0) returned 1 [0072.208] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0xae453, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb8 | out: lpNewFilePointer=0x0) returned 1 [0072.208] WriteFile (in: hFile=0x354, lpBuffer=0x56b616a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x546fbc4, lpOverlapped=0x0 | out: lpBuffer=0x56b616a*, lpNumberOfBytesWritten=0x546fbc4*=0x40000, lpOverlapped=0x0) returned 1 [0072.210] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb8 | out: lpNewFilePointer=0x0) returned 1 [0072.210] WriteFile (in: hFile=0x354, lpBuffer=0x56b616a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x546fbc4, lpOverlapped=0x0 | out: lpBuffer=0x56b616a*, lpNumberOfBytesWritten=0x546fbc4*=0x40000, lpOverlapped=0x0) returned 1 [0072.211] FlushFileBuffers (hFile=0x354) returned 1 [0072.218] CloseHandle (hObject=0x354) returned 1 [0072.635] SetEvent (hEvent=0x284) returned 1 [0072.637] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0072.639] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=145419) returned 1 [0072.639] CloseHandle (hObject=0x314) returned 1 [0072.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20 [0072.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20 [0072.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.639] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.639] SetEvent (hEvent=0x284) returned 1 [0072.640] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0072.640] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=162331) returned 1 [0072.640] CloseHandle (hObject=0x314) returned 1 [0072.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20 [0072.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20 [0072.640] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.640] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.640] SetEvent (hEvent=0x284) returned 1 [0072.641] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0072.642] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=164347) returned 1 [0072.642] CloseHandle (hObject=0x314) returned 1 [0072.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20 [0072.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20 [0072.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.643] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.645] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.647] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=85862) returned 1 [0072.647] CloseHandle (hObject=0x35c) returned 1 [0072.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0x20 [0072.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf")) returned 0x20 [0072.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.647] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.647] SetEvent (hEvent=0x284) returned 1 [0072.647] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.648] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=86178) returned 1 [0072.648] CloseHandle (hObject=0x35c) returned 1 [0072.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0x20 [0072.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf")) returned 0x20 [0072.648] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.648] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.648] SetEvent (hEvent=0x284) returned 1 [0072.648] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0072.695] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=49091) returned 1 [0072.695] CloseHandle (hObject=0x350) returned 1 [0072.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0072.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf")) returned 0x20 [0072.695] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.695] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.695] SetEvent (hEvent=0x284) returned 1 [0072.695] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0072.854] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=63840) returned 1 [0072.854] CloseHandle (hObject=0x300) returned 1 [0072.854] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0072.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui")) returned 0x20 [0072.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.855] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.855] SetEvent (hEvent=0x284) returned 1 [0072.855] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0072.855] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=63832) returned 1 [0072.855] CloseHandle (hObject=0x300) returned 1 [0072.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0072.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui")) returned 0x20 [0072.855] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.855] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.856] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0072.856] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=42328) returned 1 [0072.856] CloseHandle (hObject=0x300) returned 1 [0072.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui")) returned 0x20 [0072.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui")) returned 0x20 [0072.856] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.856] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.856] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0072.856] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=63840) returned 1 [0072.857] CloseHandle (hObject=0x300) returned 1 [0072.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0072.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui")) returned 0x20 [0072.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.857] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.857] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0072.857] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=42392) returned 1 [0072.857] CloseHandle (hObject=0x300) returned 1 [0072.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui")) returned 0x20 [0072.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui")) returned 0x20 [0072.857] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.857] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.858] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0072.861] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=395226) returned 1 [0072.861] CloseHandle (hObject=0x300) returned 1 [0072.861] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0072.861] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x26) returned 0 [0072.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0072.862] GetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\bootmgr.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.863] CreateFileW (lpFileName="\\\\?\\C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.863] SetFileAttributesW (lpFileName="\\\\?\\C:\\bootmgr", dwFileAttributes=0x27) returned 0 [0072.863] SetEvent (hEvent=0x284) returned 1 [0072.863] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0072.866] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=1) returned 1 [0072.866] CloseHandle (hObject=0x300) returned 1 [0072.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26 [0072.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 0x26 [0072.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTNXT.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\bootnxt.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.867] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0072.867] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0072.867] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0072.867] CreateFileW (lpFileName="\\\\?\\C:\\BOOTNXT.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\bootnxt.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x304 [0072.870] ReadFile (in: hFile=0x300, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x1, lpOverlapped=0x0) returned 1 [0072.873] WriteFile (in: hFile=0x304, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x10, lpOverlapped=0x0) returned 1 [0072.874] WriteFile (in: hFile=0x304, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xe2, lpOverlapped=0x0) returned 1 [0072.874] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0072.874] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0072.874] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x1, lpOverlapped=0x0) returned 1 [0072.874] FlushFileBuffers (hFile=0x300) returned 1 [0073.271] FlushFileBuffers (hFile=0x304) returned 1 [0073.274] CloseHandle (hObject=0x300) returned 1 [0073.275] CloseHandle (hObject=0x304) returned 1 [0073.276] DeleteFileW (lpFileName="\\\\?\\C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 1 [0073.277] SetEvent (hEvent=0x284) returned 1 [0073.277] CreateFileW (lpFileName="\\\\?\\C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0073.277] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0073.281] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0073.281] CloseHandle (hObject=0x304) returned 1 [0073.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 0x20 [0073.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 0x20 [0073.281] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\application.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0073.281] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0073.281] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0073.281] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0073.282] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\application.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0073.282] ReadFile (in: hFile=0x304, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0073.286] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0073.288] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0073.288] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0073.288] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0073.288] WriteFile (in: hFile=0x304, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0073.289] FlushFileBuffers (hFile=0x304) returned 1 [0073.546] FlushFileBuffers (hFile=0x300) returned 1 [0073.547] CloseHandle (hObject=0x304) returned 1 [0073.549] CloseHandle (hObject=0x300) returned 1 [0073.552] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 1 [0073.553] SetEvent (hEvent=0x284) returned 1 [0073.553] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0073.554] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0073.554] CloseHandle (hObject=0x300) returned 1 [0073.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 0x20 [0073.562] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 0x20 [0073.563] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\key management service.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0073.563] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0073.563] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0073.563] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0073.563] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\key management service.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0073.563] ReadFile (in: hFile=0x300, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0073.566] WriteFile (in: hFile=0x304, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0073.569] WriteFile (in: hFile=0x304, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x112, lpOverlapped=0x0) returned 1 [0073.569] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0073.569] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0073.569] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0073.569] FlushFileBuffers (hFile=0x300) returned 1 [0073.580] FlushFileBuffers (hFile=0x304) returned 1 [0073.582] CloseHandle (hObject=0x300) returned 1 [0073.584] CloseHandle (hObject=0x304) returned 1 [0073.586] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 1 [0073.587] SetEvent (hEvent=0x284) returned 1 [0073.587] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0073.588] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0073.588] CloseHandle (hObject=0x304) returned 1 [0073.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 0x20 [0073.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 0x20 [0073.588] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0073.588] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304 [0073.588] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0073.588] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0073.588] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0073.589] ReadFile (in: hFile=0x304, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0073.592] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0073.594] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0073.594] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0073.594] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0073.594] WriteFile (in: hFile=0x304, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0073.594] FlushFileBuffers (hFile=0x304) returned 1 [0073.597] FlushFileBuffers (hFile=0x300) returned 1 [0073.598] CloseHandle (hObject=0x304) returned 1 [0073.599] CloseHandle (hObject=0x300) returned 1 [0073.602] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 1 [0073.603] SetEvent (hEvent=0x284) returned 1 [0073.604] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0073.605] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0073.605] CloseHandle (hObject=0x300) returned 1 [0073.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 0x20 [0073.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 0x20 [0073.605] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0073.605] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0073.605] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0073.605] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0073.605] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x304 [0073.606] ReadFile (in: hFile=0x300, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0073.608] WriteFile (in: hFile=0x304, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0073.610] WriteFile (in: hFile=0x304, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x172, lpOverlapped=0x0) returned 1 [0073.610] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0073.610] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0073.610] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0073.611] FlushFileBuffers (hFile=0x300) returned 1 [0073.614] FlushFileBuffers (hFile=0x304) returned 1 [0073.615] CloseHandle (hObject=0x300) returned 1 [0073.616] CloseHandle (hObject=0x304) returned 1 [0073.618] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 1 [0073.619] SetEvent (hEvent=0x284) returned 1 [0073.620] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0073.629] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=1052672) returned 1 [0073.629] CloseHandle (hObject=0x300) returned 1 [0073.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 0x20 [0073.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 0x20 [0073.629] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0073.631] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0073.631] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0073.631] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0073.631] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x344 [0073.632] ReadFile (in: hFile=0x300, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x101000, lpOverlapped=0x0) returned 1 [0073.668] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x101010, lpOverlapped=0x0) returned 1 [0073.913] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x162, lpOverlapped=0x0) returned 1 [0073.913] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0073.913] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0073.913] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x101000, lpOverlapped=0x0) returned 1 [0073.918] FlushFileBuffers (hFile=0x300) returned 1 [0074.045] FlushFileBuffers (hFile=0x344) returned 1 [0074.048] CloseHandle (hObject=0x300) returned 1 [0074.066] CloseHandle (hObject=0x344) returned 1 [0074.162] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 1 [0074.171] SetEvent (hEvent=0x284) returned 1 [0074.172] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0074.172] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0074.172] CloseHandle (hObject=0x344) returned 1 [0074.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 0x20 [0074.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 0x20 [0074.172] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.172] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0074.172] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.172] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.172] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0074.174] ReadFile (in: hFile=0x344, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0074.176] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0074.178] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x152, lpOverlapped=0x0) returned 1 [0074.178] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.178] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.178] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0074.178] FlushFileBuffers (hFile=0x344) returned 1 [0074.186] FlushFileBuffers (hFile=0x300) returned 1 [0074.187] CloseHandle (hObject=0x344) returned 1 [0074.188] CloseHandle (hObject=0x300) returned 1 [0074.190] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 1 [0074.193] SetEvent (hEvent=0x284) returned 1 [0074.193] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0074.193] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0074.193] CloseHandle (hObject=0x300) returned 1 [0074.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 0x20 [0074.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 0x20 [0074.193] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.193] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0074.194] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.194] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.194] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x344 [0074.195] ReadFile (in: hFile=0x300, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0074.197] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0074.199] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x152, lpOverlapped=0x0) returned 1 [0074.199] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.200] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.200] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0074.200] FlushFileBuffers (hFile=0x300) returned 1 [0074.203] FlushFileBuffers (hFile=0x344) returned 1 [0074.204] CloseHandle (hObject=0x300) returned 1 [0074.205] CloseHandle (hObject=0x344) returned 1 [0074.207] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 1 [0074.209] SetEvent (hEvent=0x284) returned 1 [0074.209] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0074.209] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0074.209] CloseHandle (hObject=0x344) returned 1 [0074.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 0x20 [0074.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 0x20 [0074.209] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.209] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0074.210] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.210] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.210] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0074.210] ReadFile (in: hFile=0x344, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0074.213] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0074.214] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0074.215] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.215] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.215] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0074.215] FlushFileBuffers (hFile=0x344) returned 1 [0074.218] FlushFileBuffers (hFile=0x300) returned 1 [0074.219] CloseHandle (hObject=0x344) returned 1 [0074.220] CloseHandle (hObject=0x300) returned 1 [0074.222] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 1 [0074.223] SetEvent (hEvent=0x284) returned 1 [0074.223] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0074.223] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0074.224] CloseHandle (hObject=0x300) returned 1 [0074.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 0x20 [0074.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 0x20 [0074.224] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.224] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0074.224] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.224] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.224] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x344 [0074.224] ReadFile (in: hFile=0x300, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0074.227] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0074.229] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0074.229] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.229] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.229] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0074.229] FlushFileBuffers (hFile=0x300) returned 1 [0074.232] FlushFileBuffers (hFile=0x344) returned 1 [0074.233] CloseHandle (hObject=0x300) returned 1 [0074.235] CloseHandle (hObject=0x344) returned 1 [0074.236] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 1 [0074.238] SetEvent (hEvent=0x284) returned 1 [0074.238] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0074.240] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=1118208) returned 1 [0074.240] CloseHandle (hObject=0x344) returned 1 [0074.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 0x20 [0074.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 0x20 [0074.241] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.241] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0074.241] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.241] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.241] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0074.241] ReadFile (in: hFile=0x344, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x110100, lpOverlapped=0x0) returned 1 [0074.268] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x110100, lpOverlapped=0x0) returned 1 [0074.365] ReadFile (in: hFile=0x344, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xf00, lpOverlapped=0x0) returned 1 [0074.365] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf10, lpOverlapped=0x0) returned 1 [0074.365] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x142, lpOverlapped=0x0) returned 1 [0074.365] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.365] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.366] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x110102, lpOverlapped=0x0) returned 1 [0074.371] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xefe, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xefe, lpOverlapped=0x0) returned 1 [0074.371] FlushFileBuffers (hFile=0x344) returned 1 [0074.377] FlushFileBuffers (hFile=0x300) returned 1 [0074.379] CloseHandle (hObject=0x344) returned 1 [0074.399] CloseHandle (hObject=0x300) returned 1 [0074.420] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 1 [0074.499] SetEvent (hEvent=0x284) returned 1 [0074.499] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0074.500] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=2166784) returned 1 [0074.500] CloseHandle (hObject=0x31c) returned 1 [0074.500] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx")) returned 0x20 [0074.500] MoveFileW (lpExistingFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), lpNewFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 1 [0074.500] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0074.500] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0074.500] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0074.501] ReadFile (in: hFile=0x31c, lpBuffer=0x55f6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x546fbbc, lpOverlapped=0x0 | out: lpBuffer=0x55f6058*, lpNumberOfBytesRead=0x546fbbc*=0x40000, lpOverlapped=0x0) returned 1 [0074.503] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0xb0555, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0074.503] ReadFile (in: hFile=0x31c, lpBuffer=0x5636058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x546fbbc, lpOverlapped=0x0 | out: lpBuffer=0x5636058*, lpNumberOfBytesRead=0x546fbbc*=0x40000, lpOverlapped=0x0) returned 1 [0074.508] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x1d1000, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb0 | out: lpNewFilePointer=0x0) returned 1 [0074.509] ReadFile (in: hFile=0x31c, lpBuffer=0x5676058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x546fbbc, lpOverlapped=0x0 | out: lpBuffer=0x5676058*, lpNumberOfBytesRead=0x546fbbc*=0x40000, lpOverlapped=0x0) returned 1 [0074.530] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd20 | out: lpNewFilePointer=0x0) returned 1 [0074.530] WriteFile (in: hFile=0x31c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xc0162, lpNumberOfBytesWritten=0x546fd18, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd18*=0xc0162, lpOverlapped=0x0) returned 1 [0074.715] SetEndOfFile (hFile=0x31c) returned 1 [0074.716] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x1d1000, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.716] WriteFile (in: hFile=0x31c, lpBuffer=0x56b619a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x546fbc4, lpOverlapped=0x0 | out: lpBuffer=0x56b619a*, lpNumberOfBytesWritten=0x546fbc4*=0x40000, lpOverlapped=0x0) returned 1 [0074.717] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0xb0555, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.717] WriteFile (in: hFile=0x31c, lpBuffer=0x56b619a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x546fbc4, lpOverlapped=0x0 | out: lpBuffer=0x56b619a*, lpNumberOfBytesWritten=0x546fbc4*=0x40000, lpOverlapped=0x0) returned 1 [0074.719] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.719] WriteFile (in: hFile=0x31c, lpBuffer=0x56b619a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x546fbc4, lpOverlapped=0x0 | out: lpBuffer=0x56b619a*, lpNumberOfBytesWritten=0x546fbc4*=0x40000, lpOverlapped=0x0) returned 1 [0074.720] FlushFileBuffers (hFile=0x31c) returned 1 [0074.787] CloseHandle (hObject=0x31c) returned 1 [0074.791] SetEvent (hEvent=0x284) returned 1 [0074.791] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0074.892] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0074.892] CloseHandle (hObject=0x2bc) returned 1 [0074.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 0x20 [0074.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 0x20 [0074.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.892] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0074.892] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.892] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.892] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x350 [0074.896] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0074.900] WriteFile (in: hFile=0x350, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0074.902] WriteFile (in: hFile=0x350, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x142, lpOverlapped=0x0) returned 1 [0074.902] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.902] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.902] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0074.902] FlushFileBuffers (hFile=0x2bc) returned 1 [0074.923] FlushFileBuffers (hFile=0x350) returned 1 [0074.930] CloseHandle (hObject=0x2bc) returned 1 [0074.931] CloseHandle (hObject=0x350) returned 1 [0074.931] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 1 [0074.932] SetEvent (hEvent=0x284) returned 1 [0074.932] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0074.933] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0074.933] CloseHandle (hObject=0x350) returned 1 [0074.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 0x20 [0074.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 0x20 [0074.933] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.933] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0074.933] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.933] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.933] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0074.933] ReadFile (in: hFile=0x350, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0074.937] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0074.939] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0074.939] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.939] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.939] WriteFile (in: hFile=0x350, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0074.940] FlushFileBuffers (hFile=0x350) returned 1 [0074.949] FlushFileBuffers (hFile=0x2bc) returned 1 [0074.960] CloseHandle (hObject=0x350) returned 1 [0074.961] CloseHandle (hObject=0x2bc) returned 1 [0074.961] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 1 [0074.962] SetEvent (hEvent=0x284) returned 1 [0074.962] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0074.962] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0074.962] CloseHandle (hObject=0x2bc) returned 1 [0074.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 0x20 [0074.962] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 0x20 [0074.963] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.963] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0074.963] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.963] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0074.963] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x350 [0074.963] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0074.969] WriteFile (in: hFile=0x350, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0074.970] WriteFile (in: hFile=0x350, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x152, lpOverlapped=0x0) returned 1 [0074.971] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.971] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0074.971] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0074.971] FlushFileBuffers (hFile=0x2bc) returned 1 [0075.474] FlushFileBuffers (hFile=0x350) returned 1 [0075.477] CloseHandle (hObject=0x2bc) returned 1 [0075.477] CloseHandle (hObject=0x350) returned 1 [0075.478] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 1 [0075.479] SetEvent (hEvent=0x284) returned 1 [0075.479] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0075.480] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0075.480] CloseHandle (hObject=0x350) returned 1 [0075.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 0x20 [0075.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 0x20 [0075.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0075.481] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0075.481] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0075.481] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0075.481] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0075.481] ReadFile (in: hFile=0x350, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0075.653] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0075.655] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x142, lpOverlapped=0x0) returned 1 [0075.655] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0075.656] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0075.656] WriteFile (in: hFile=0x350, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0075.660] FlushFileBuffers (hFile=0x350) returned 1 [0075.703] FlushFileBuffers (hFile=0x2bc) returned 1 [0075.704] CloseHandle (hObject=0x350) returned 1 [0075.705] CloseHandle (hObject=0x2bc) returned 1 [0075.705] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 1 [0075.714] SetEvent (hEvent=0x284) returned 1 [0075.714] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0075.714] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=1052672) returned 1 [0075.714] CloseHandle (hObject=0x2bc) returned 1 [0075.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 0x20 [0075.714] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 0x20 [0075.715] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0075.715] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0075.715] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0075.715] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0075.715] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x350 [0075.716] ReadFile (in: hFile=0x2bc, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x101000, lpOverlapped=0x0) returned 1 [0075.828] WriteFile (in: hFile=0x350, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x101010, lpOverlapped=0x0) returned 1 [0076.008] WriteFile (in: hFile=0x350, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x172, lpOverlapped=0x0) returned 1 [0076.008] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.008] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.008] WriteFile (in: hFile=0x2bc, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x101000, lpOverlapped=0x0) returned 1 [0076.013] FlushFileBuffers (hFile=0x2bc) returned 1 [0076.020] FlushFileBuffers (hFile=0x350) returned 1 [0076.023] CloseHandle (hObject=0x2bc) returned 1 [0076.023] CloseHandle (hObject=0x350) returned 1 [0076.024] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 1 [0076.033] SetEvent (hEvent=0x284) returned 1 [0076.034] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0076.034] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0076.034] CloseHandle (hObject=0x350) returned 1 [0076.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 0x20 [0076.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 0x20 [0076.034] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.043] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0076.043] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.044] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.044] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0076.044] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0076.051] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0076.053] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x152, lpOverlapped=0x0) returned 1 [0076.053] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.053] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.053] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0076.054] FlushFileBuffers (hFile=0x368) returned 1 [0076.058] FlushFileBuffers (hFile=0x300) returned 1 [0076.065] CloseHandle (hObject=0x368) returned 1 [0076.065] CloseHandle (hObject=0x300) returned 1 [0076.065] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 1 [0076.070] SetEvent (hEvent=0x284) returned 1 [0076.070] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0076.077] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0076.077] CloseHandle (hObject=0x300) returned 1 [0076.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 0x20 [0076.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 0x20 [0076.077] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.077] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0076.077] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.077] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.077] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0076.077] ReadFile (in: hFile=0x300, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0076.082] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0076.084] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0076.084] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.084] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.084] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0076.084] FlushFileBuffers (hFile=0x300) returned 1 [0076.087] FlushFileBuffers (hFile=0x368) returned 1 [0076.088] CloseHandle (hObject=0x300) returned 1 [0076.088] CloseHandle (hObject=0x368) returned 1 [0076.088] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 1 [0076.090] SetEvent (hEvent=0x284) returned 1 [0076.090] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0076.090] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0076.090] CloseHandle (hObject=0x368) returned 1 [0076.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 0x20 [0076.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 0x20 [0076.090] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.090] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0076.090] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.091] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.091] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0076.091] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0076.093] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0076.095] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x142, lpOverlapped=0x0) returned 1 [0076.095] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.095] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.095] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0076.096] FlushFileBuffers (hFile=0x368) returned 1 [0076.101] FlushFileBuffers (hFile=0x300) returned 1 [0076.102] CloseHandle (hObject=0x368) returned 1 [0076.103] CloseHandle (hObject=0x300) returned 1 [0076.103] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 1 [0076.104] SetEvent (hEvent=0x284) returned 1 [0076.104] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0076.105] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0076.105] CloseHandle (hObject=0x300) returned 1 [0076.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 0x20 [0076.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 0x20 [0076.106] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.106] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0076.106] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.106] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.106] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0076.107] ReadFile (in: hFile=0x300, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0076.109] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0076.111] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x142, lpOverlapped=0x0) returned 1 [0076.111] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.111] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.111] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0076.112] FlushFileBuffers (hFile=0x300) returned 1 [0076.118] FlushFileBuffers (hFile=0x368) returned 1 [0076.123] CloseHandle (hObject=0x300) returned 1 [0076.123] CloseHandle (hObject=0x368) returned 1 [0076.123] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 1 [0076.125] SetEvent (hEvent=0x284) returned 1 [0076.125] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0076.125] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0076.125] CloseHandle (hObject=0x368) returned 1 [0076.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 0x20 [0076.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 0x20 [0076.125] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.125] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0076.125] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.126] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.126] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0076.131] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0076.135] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0076.136] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0076.137] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.137] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.137] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0076.137] FlushFileBuffers (hFile=0x368) returned 1 [0076.140] FlushFileBuffers (hFile=0x300) returned 1 [0076.149] CloseHandle (hObject=0x368) returned 1 [0076.150] CloseHandle (hObject=0x300) returned 1 [0076.150] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 1 [0076.151] SetEvent (hEvent=0x284) returned 1 [0076.152] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0076.152] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0076.152] CloseHandle (hObject=0x300) returned 1 [0076.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 0x20 [0076.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 0x20 [0076.152] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.152] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0076.152] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.153] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.153] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0076.153] ReadFile (in: hFile=0x300, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0076.155] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0076.157] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x142, lpOverlapped=0x0) returned 1 [0076.157] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.157] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.157] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0076.158] FlushFileBuffers (hFile=0x300) returned 1 [0076.301] FlushFileBuffers (hFile=0x368) returned 1 [0076.305] CloseHandle (hObject=0x300) returned 1 [0076.305] CloseHandle (hObject=0x368) returned 1 [0076.306] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 1 [0076.307] SetEvent (hEvent=0x284) returned 1 [0076.307] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0076.307] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0076.308] CloseHandle (hObject=0x368) returned 1 [0076.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 0x20 [0076.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 0x20 [0076.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.308] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0076.308] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.308] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.308] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0076.308] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0076.312] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0076.314] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x152, lpOverlapped=0x0) returned 1 [0076.314] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.314] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.314] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0076.315] FlushFileBuffers (hFile=0x368) returned 1 [0076.317] FlushFileBuffers (hFile=0x300) returned 1 [0076.319] CloseHandle (hObject=0x368) returned 1 [0076.319] CloseHandle (hObject=0x300) returned 1 [0076.320] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 1 [0076.321] SetEvent (hEvent=0x284) returned 1 [0076.321] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0076.321] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0076.322] CloseHandle (hObject=0x300) returned 1 [0076.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 0x20 [0076.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 0x20 [0076.322] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.322] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0076.322] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.322] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.322] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x344 [0076.323] ReadFile (in: hFile=0x300, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0076.327] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0076.328] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x142, lpOverlapped=0x0) returned 1 [0076.329] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.329] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.329] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0076.329] FlushFileBuffers (hFile=0x300) returned 1 [0076.332] FlushFileBuffers (hFile=0x344) returned 1 [0076.333] CloseHandle (hObject=0x300) returned 1 [0076.334] CloseHandle (hObject=0x344) returned 1 [0076.334] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 1 [0076.335] SetEvent (hEvent=0x284) returned 1 [0076.335] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0076.335] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0076.335] CloseHandle (hObject=0x344) returned 1 [0076.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 0x20 [0076.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 0x20 [0076.336] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.336] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0076.336] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.336] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.336] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0076.336] ReadFile (in: hFile=0x344, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0076.339] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0076.341] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x142, lpOverlapped=0x0) returned 1 [0076.341] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.341] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.341] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0076.342] FlushFileBuffers (hFile=0x344) returned 1 [0076.344] FlushFileBuffers (hFile=0x300) returned 1 [0076.346] CloseHandle (hObject=0x344) returned 1 [0076.346] CloseHandle (hObject=0x300) returned 1 [0076.346] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 1 [0076.348] SetEvent (hEvent=0x284) returned 1 [0076.348] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0076.351] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0076.351] CloseHandle (hObject=0x300) returned 1 [0076.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 0x20 [0076.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 0x20 [0076.351] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.351] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0076.351] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.351] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.351] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x344 [0076.352] ReadFile (in: hFile=0x300, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0076.354] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0076.356] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0076.356] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.356] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.356] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0076.357] FlushFileBuffers (hFile=0x300) returned 1 [0076.533] FlushFileBuffers (hFile=0x344) returned 1 [0076.536] CloseHandle (hObject=0x300) returned 1 [0076.536] CloseHandle (hObject=0x344) returned 1 [0076.536] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 1 [0076.538] SetEvent (hEvent=0x284) returned 1 [0076.538] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0076.538] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0076.538] CloseHandle (hObject=0x344) returned 1 [0076.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 0x20 [0076.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 0x20 [0076.538] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.538] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0076.539] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.539] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0076.539] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0076.540] ReadFile (in: hFile=0x344, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0076.546] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0076.547] WriteFile (in: hFile=0x300, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x142, lpOverlapped=0x0) returned 1 [0076.548] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.548] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0076.548] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0076.548] FlushFileBuffers (hFile=0x344) returned 1 [0077.337] FlushFileBuffers (hFile=0x300) returned 1 [0077.474] CloseHandle (hObject=0x344) returned 1 [0077.474] CloseHandle (hObject=0x300) returned 1 [0077.474] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 1 [0077.476] SetEvent (hEvent=0x284) returned 1 [0077.476] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0077.488] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0077.488] CloseHandle (hObject=0x344) returned 1 [0077.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 0x20 [0077.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 0x20 [0077.488] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0077.488] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0077.489] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0077.489] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0077.489] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x318 [0077.489] ReadFile (in: hFile=0x344, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0077.500] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0077.502] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x172, lpOverlapped=0x0) returned 1 [0077.503] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0077.503] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0077.503] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0077.503] FlushFileBuffers (hFile=0x344) returned 1 [0077.799] FlushFileBuffers (hFile=0x318) returned 1 [0077.799] CloseHandle (hObject=0x344) returned 1 [0077.800] CloseHandle (hObject=0x318) returned 1 [0077.800] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 1 [0077.801] SetEvent (hEvent=0x284) returned 1 [0077.801] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0077.802] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0077.802] CloseHandle (hObject=0x318) returned 1 [0077.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 0x20 [0077.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 0x20 [0077.802] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0077.802] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0077.802] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0077.802] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0077.802] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x344 [0077.803] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0077.806] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0077.807] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0077.808] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0077.808] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0077.808] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0077.808] FlushFileBuffers (hFile=0x318) returned 1 [0077.810] FlushFileBuffers (hFile=0x344) returned 1 [0077.812] CloseHandle (hObject=0x318) returned 1 [0077.812] CloseHandle (hObject=0x344) returned 1 [0077.813] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 1 [0077.814] SetEvent (hEvent=0x284) returned 1 [0077.814] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0077.814] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0077.814] CloseHandle (hObject=0x344) returned 1 [0077.814] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 0x20 [0077.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 0x20 [0077.815] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0077.815] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0077.815] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0077.815] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0077.815] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x318 [0077.815] ReadFile (in: hFile=0x344, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0077.819] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0077.821] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0077.821] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0077.821] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0077.821] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0077.821] FlushFileBuffers (hFile=0x344) returned 1 [0078.091] FlushFileBuffers (hFile=0x318) returned 1 [0078.092] CloseHandle (hObject=0x344) returned 1 [0078.092] CloseHandle (hObject=0x318) returned 1 [0078.092] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 1 [0078.094] SetEvent (hEvent=0x284) returned 1 [0078.094] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0078.094] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0078.094] CloseHandle (hObject=0x318) returned 1 [0078.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 0x20 [0078.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 0x20 [0078.094] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.094] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0078.094] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.095] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.095] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x344 [0078.095] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0078.097] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0078.099] WriteFile (in: hFile=0x344, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0078.099] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.099] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.099] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0078.100] FlushFileBuffers (hFile=0x318) returned 1 [0078.264] FlushFileBuffers (hFile=0x344) returned 1 [0078.265] CloseHandle (hObject=0x318) returned 1 [0078.266] CloseHandle (hObject=0x344) returned 1 [0078.266] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 1 [0078.267] SetEvent (hEvent=0x284) returned 1 [0078.267] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0078.269] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0078.269] CloseHandle (hObject=0x318) returned 1 [0078.269] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 0x20 [0078.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 0x20 [0078.270] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.270] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0078.270] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.270] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.270] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0078.270] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0078.319] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0078.320] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x162, lpOverlapped=0x0) returned 1 [0078.321] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.321] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.321] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0078.321] FlushFileBuffers (hFile=0x318) returned 1 [0078.327] FlushFileBuffers (hFile=0x368) returned 1 [0078.328] CloseHandle (hObject=0x318) returned 1 [0078.328] CloseHandle (hObject=0x368) returned 1 [0078.328] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 1 [0078.330] SetEvent (hEvent=0x284) returned 1 [0078.330] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0078.333] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0078.333] CloseHandle (hObject=0x368) returned 1 [0078.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 0x20 [0078.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 0x20 [0078.333] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.334] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0078.334] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.334] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.334] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x318 [0078.336] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0078.339] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0078.341] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x172, lpOverlapped=0x0) returned 1 [0078.341] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.341] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.341] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0078.341] FlushFileBuffers (hFile=0x368) returned 1 [0078.354] FlushFileBuffers (hFile=0x318) returned 1 [0078.357] CloseHandle (hObject=0x368) returned 1 [0078.357] CloseHandle (hObject=0x318) returned 1 [0078.358] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 1 [0078.359] SetEvent (hEvent=0x284) returned 1 [0078.359] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0078.359] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0078.360] CloseHandle (hObject=0x318) returned 1 [0078.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 0x20 [0078.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 0x20 [0078.360] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.360] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0078.360] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.360] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.360] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0078.361] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0078.365] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0078.367] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0078.368] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.368] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.368] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0078.368] FlushFileBuffers (hFile=0x318) returned 1 [0078.383] FlushFileBuffers (hFile=0x368) returned 1 [0078.385] CloseHandle (hObject=0x318) returned 1 [0078.385] CloseHandle (hObject=0x368) returned 1 [0078.385] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 1 [0078.387] SetEvent (hEvent=0x284) returned 1 [0078.387] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0078.387] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0078.387] CloseHandle (hObject=0x368) returned 1 [0078.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 0x20 [0078.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 0x20 [0078.387] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.387] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0078.388] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.388] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.388] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x318 [0078.388] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0078.392] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0078.394] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0078.394] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.394] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.394] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0078.395] FlushFileBuffers (hFile=0x368) returned 1 [0078.402] FlushFileBuffers (hFile=0x318) returned 1 [0078.408] CloseHandle (hObject=0x368) returned 1 [0078.409] CloseHandle (hObject=0x318) returned 1 [0078.410] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 1 [0078.411] SetEvent (hEvent=0x284) returned 1 [0078.412] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0078.414] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0078.414] CloseHandle (hObject=0x368) returned 1 [0078.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 0x20 [0078.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 0x20 [0078.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.414] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0078.415] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.415] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.415] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0078.415] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0078.418] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0078.420] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x152, lpOverlapped=0x0) returned 1 [0078.420] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.420] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.420] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0078.421] FlushFileBuffers (hFile=0x368) returned 1 [0078.432] FlushFileBuffers (hFile=0x36c) returned 1 [0078.434] CloseHandle (hObject=0x368) returned 1 [0078.434] CloseHandle (hObject=0x36c) returned 1 [0078.434] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 1 [0078.436] SetEvent (hEvent=0x284) returned 1 [0078.436] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0078.436] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0078.436] CloseHandle (hObject=0x36c) returned 1 [0078.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 0x20 [0078.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 0x20 [0078.436] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.436] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0078.437] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.437] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.437] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0078.438] ReadFile (in: hFile=0x36c, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0078.440] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0078.442] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x142, lpOverlapped=0x0) returned 1 [0078.442] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.442] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.442] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0078.443] FlushFileBuffers (hFile=0x36c) returned 1 [0078.474] FlushFileBuffers (hFile=0x368) returned 1 [0078.480] CloseHandle (hObject=0x36c) returned 1 [0078.480] CloseHandle (hObject=0x368) returned 1 [0078.480] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 1 [0078.481] SetEvent (hEvent=0x284) returned 1 [0078.482] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0078.482] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0078.482] CloseHandle (hObject=0x368) returned 1 [0078.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 0x20 [0078.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 0x20 [0078.482] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.482] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0078.482] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.482] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.482] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0078.484] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0078.487] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0078.489] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0078.489] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.489] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.489] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0078.490] FlushFileBuffers (hFile=0x368) returned 1 [0078.494] FlushFileBuffers (hFile=0x36c) returned 1 [0078.495] CloseHandle (hObject=0x368) returned 1 [0078.495] CloseHandle (hObject=0x36c) returned 1 [0078.495] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 1 [0078.497] SetEvent (hEvent=0x284) returned 1 [0078.497] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0078.497] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0078.497] CloseHandle (hObject=0x36c) returned 1 [0078.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 0x20 [0078.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 0x20 [0078.497] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.497] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0078.498] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.498] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.498] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0078.498] ReadFile (in: hFile=0x36c, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0078.501] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0078.503] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x182, lpOverlapped=0x0) returned 1 [0078.503] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.503] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.503] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0078.503] FlushFileBuffers (hFile=0x36c) returned 1 [0078.535] FlushFileBuffers (hFile=0x368) returned 1 [0078.576] CloseHandle (hObject=0x36c) returned 1 [0078.576] CloseHandle (hObject=0x368) returned 1 [0078.576] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 1 [0078.578] SetEvent (hEvent=0x284) returned 1 [0078.578] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0078.579] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=1052672) returned 1 [0078.579] CloseHandle (hObject=0x368) returned 1 [0078.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 0x20 [0078.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 0x20 [0078.579] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.579] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0078.579] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.579] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.579] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0078.580] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x101000, lpOverlapped=0x0) returned 1 [0078.607] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x101010, lpOverlapped=0x0) returned 1 [0078.869] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x172, lpOverlapped=0x0) returned 1 [0078.870] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.870] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.870] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x101000, lpOverlapped=0x0) returned 1 [0078.876] FlushFileBuffers (hFile=0x368) returned 1 [0078.884] FlushFileBuffers (hFile=0x36c) returned 1 [0078.891] CloseHandle (hObject=0x368) returned 1 [0078.892] CloseHandle (hObject=0x36c) returned 1 [0078.894] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 1 [0078.904] SetEvent (hEvent=0x284) returned 1 [0078.904] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0078.904] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0078.904] CloseHandle (hObject=0x36c) returned 1 [0078.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 0x20 [0078.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 0x20 [0078.904] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.905] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0078.905] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.905] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0078.905] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0078.905] ReadFile (in: hFile=0x36c, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0078.909] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0078.911] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x152, lpOverlapped=0x0) returned 1 [0078.911] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.911] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0078.911] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0078.911] FlushFileBuffers (hFile=0x36c) returned 1 [0079.226] FlushFileBuffers (hFile=0x368) returned 1 [0079.229] CloseHandle (hObject=0x36c) returned 1 [0079.230] CloseHandle (hObject=0x368) returned 1 [0079.230] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 1 [0079.231] SetEvent (hEvent=0x284) returned 1 [0079.231] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0079.232] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=1118208) returned 1 [0079.232] CloseHandle (hObject=0x368) returned 1 [0079.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 0x20 [0079.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 0x20 [0079.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\security.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0079.232] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0079.232] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0079.232] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0079.232] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\security.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0079.233] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x110100, lpOverlapped=0x0) returned 1 [0079.263] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x110100, lpOverlapped=0x0) returned 1 [0079.498] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xf00, lpOverlapped=0x0) returned 1 [0079.498] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf10, lpOverlapped=0x0) returned 1 [0079.498] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0079.498] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0079.498] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0079.498] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x110102, lpOverlapped=0x0) returned 1 [0079.504] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xefe, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xefe, lpOverlapped=0x0) returned 1 [0079.504] FlushFileBuffers (hFile=0x368) returned 1 [0079.510] FlushFileBuffers (hFile=0x36c) returned 1 [0079.512] CloseHandle (hObject=0x368) returned 1 [0079.512] CloseHandle (hObject=0x36c) returned 1 [0079.512] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 1 [0079.522] SetEvent (hEvent=0x284) returned 1 [0079.522] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0079.522] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=69632) returned 1 [0079.522] CloseHandle (hObject=0x36c) returned 1 [0079.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 0x20 [0079.522] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 0x20 [0079.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\setup.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0079.523] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0079.523] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0079.523] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0079.523] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\setup.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0079.523] ReadFile (in: hFile=0x36c, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x11000, lpOverlapped=0x0) returned 1 [0079.526] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x11010, lpOverlapped=0x0) returned 1 [0079.528] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0079.528] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0079.528] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0079.528] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x11000, lpOverlapped=0x0) returned 1 [0079.528] FlushFileBuffers (hFile=0x36c) returned 1 [0079.533] FlushFileBuffers (hFile=0x368) returned 1 [0079.534] CloseHandle (hObject=0x36c) returned 1 [0079.534] CloseHandle (hObject=0x368) returned 1 [0079.535] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 1 [0079.536] SetEvent (hEvent=0x284) returned 1 [0079.536] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0079.537] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=1118208) returned 1 [0079.537] CloseHandle (hObject=0x368) returned 1 [0079.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 0x20 [0079.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 0x20 [0079.537] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\System.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\system.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0079.537] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0079.537] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0079.537] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0079.537] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\System.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\system.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0079.538] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x110100, lpOverlapped=0x0) returned 1 [0079.565] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x110100, lpOverlapped=0x0) returned 1 [0079.855] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0xf00, lpOverlapped=0x0) returned 1 [0079.855] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf10, lpOverlapped=0x0) returned 1 [0079.855] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0xf2, lpOverlapped=0x0) returned 1 [0079.856] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0079.856] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0079.856] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x110102, lpOverlapped=0x0) returned 1 [0079.862] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0xefe, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0xefe, lpOverlapped=0x0) returned 1 [0079.862] FlushFileBuffers (hFile=0x368) returned 1 [0079.868] FlushFileBuffers (hFile=0x36c) returned 1 [0079.871] CloseHandle (hObject=0x368) returned 1 [0079.871] CloseHandle (hObject=0x36c) returned 1 [0079.871] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 1 [0079.881] SetEvent (hEvent=0x284) returned 1 [0079.881] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0079.881] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=18624) returned 1 [0079.881] CloseHandle (hObject=0x36c) returned 1 [0079.881] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20 [0079.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20 [0079.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0079.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0079.882] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0079.882] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0079.882] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0079.883] ReadFile (in: hFile=0x36c, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x48c0, lpOverlapped=0x0) returned 1 [0079.885] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x48d0, lpOverlapped=0x0) returned 1 [0079.886] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x112, lpOverlapped=0x0) returned 1 [0079.886] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0079.886] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0079.886] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x48c0, lpOverlapped=0x0) returned 1 [0079.886] FlushFileBuffers (hFile=0x36c) returned 1 [0080.128] FlushFileBuffers (hFile=0x368) returned 1 [0080.129] CloseHandle (hObject=0x36c) returned 1 [0080.130] CloseHandle (hObject=0x368) returned 1 [0080.130] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 1 [0080.131] SetEvent (hEvent=0x284) returned 1 [0080.131] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0080.133] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=18624) returned 1 [0080.133] CloseHandle (hObject=0x368) returned 1 [0080.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20 [0080.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20 [0080.134] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0080.134] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.134] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.134] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x36c [0080.135] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x48c0, lpOverlapped=0x0) returned 1 [0080.136] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x48d0, lpOverlapped=0x0) returned 1 [0080.138] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x112, lpOverlapped=0x0) returned 1 [0080.138] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.138] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.138] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x48c0, lpOverlapped=0x0) returned 1 [0080.138] FlushFileBuffers (hFile=0x368) returned 1 [0080.144] FlushFileBuffers (hFile=0x36c) returned 1 [0080.145] CloseHandle (hObject=0x368) returned 1 [0080.145] CloseHandle (hObject=0x36c) returned 1 [0080.145] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 1 [0080.146] SetEvent (hEvent=0x284) returned 1 [0080.146] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0080.147] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=21184) returned 1 [0080.147] CloseHandle (hObject=0x36c) returned 1 [0080.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20 [0080.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20 [0080.147] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c [0080.147] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.147] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.147] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0080.147] ReadFile (in: hFile=0x36c, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x52c0, lpOverlapped=0x0) returned 1 [0080.149] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x52d0, lpOverlapped=0x0) returned 1 [0080.151] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x122, lpOverlapped=0x0) returned 1 [0080.151] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.151] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.151] WriteFile (in: hFile=0x36c, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x52c0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x52c0, lpOverlapped=0x0) returned 1 [0080.151] FlushFileBuffers (hFile=0x36c) returned 1 [0080.153] FlushFileBuffers (hFile=0x368) returned 1 [0080.154] CloseHandle (hObject=0x36c) returned 1 [0080.154] CloseHandle (hObject=0x368) returned 1 [0080.154] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 1 [0080.155] SetEvent (hEvent=0x284) returned 1 [0080.155] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0080.155] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=19136) returned 1 [0080.155] CloseHandle (hObject=0x368) returned 1 [0080.155] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20 [0080.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20 [0080.156] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0080.156] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.156] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.156] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x318 [0080.158] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4ac0, lpOverlapped=0x0) returned 1 [0080.159] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4ad0, lpOverlapped=0x0) returned 1 [0080.161] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x132, lpOverlapped=0x0) returned 1 [0080.161] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.161] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.161] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4ac0, lpOverlapped=0x0) returned 1 [0080.161] FlushFileBuffers (hFile=0x368) returned 1 [0080.163] FlushFileBuffers (hFile=0x318) returned 1 [0080.164] CloseHandle (hObject=0x368) returned 1 [0080.164] CloseHandle (hObject=0x318) returned 1 [0080.165] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 1 [0080.166] SetEvent (hEvent=0x284) returned 1 [0080.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0080.166] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=19136) returned 1 [0080.166] CloseHandle (hObject=0x318) returned 1 [0080.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20 [0080.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20 [0080.166] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.166] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0080.166] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.166] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.167] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0080.167] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4ac0, lpOverlapped=0x0) returned 1 [0080.170] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4ad0, lpOverlapped=0x0) returned 1 [0080.171] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x122, lpOverlapped=0x0) returned 1 [0080.171] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.171] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.171] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4ac0, lpOverlapped=0x0) returned 1 [0080.171] FlushFileBuffers (hFile=0x318) returned 1 [0080.279] FlushFileBuffers (hFile=0x368) returned 1 [0080.280] CloseHandle (hObject=0x318) returned 1 [0080.281] CloseHandle (hObject=0x368) returned 1 [0080.281] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 1 [0080.282] SetEvent (hEvent=0x284) returned 1 [0080.282] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0080.282] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=11616) returned 1 [0080.282] CloseHandle (hObject=0x368) returned 1 [0080.282] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20 [0080.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20 [0080.283] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0080.283] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.283] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.283] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x318 [0080.283] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x2d60, lpOverlapped=0x0) returned 1 [0080.285] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x2d70, lpOverlapped=0x0) returned 1 [0080.286] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x122, lpOverlapped=0x0) returned 1 [0080.286] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.286] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.286] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x2d60, lpOverlapped=0x0) returned 1 [0080.286] FlushFileBuffers (hFile=0x368) returned 1 [0080.288] FlushFileBuffers (hFile=0x318) returned 1 [0080.290] CloseHandle (hObject=0x368) returned 1 [0080.290] CloseHandle (hObject=0x318) returned 1 [0080.293] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 1 [0080.294] SetEvent (hEvent=0x284) returned 1 [0080.294] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0080.294] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=19648) returned 1 [0080.294] CloseHandle (hObject=0x318) returned 1 [0080.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20 [0080.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20 [0080.294] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0080.295] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.295] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.295] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0080.295] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4cc0, lpOverlapped=0x0) returned 1 [0080.297] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4cd0, lpOverlapped=0x0) returned 1 [0080.298] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x112, lpOverlapped=0x0) returned 1 [0080.298] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.299] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.299] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4cc0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4cc0, lpOverlapped=0x0) returned 1 [0080.299] FlushFileBuffers (hFile=0x318) returned 1 [0080.305] FlushFileBuffers (hFile=0x368) returned 1 [0080.306] CloseHandle (hObject=0x318) returned 1 [0080.307] CloseHandle (hObject=0x368) returned 1 [0080.307] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 1 [0080.308] SetEvent (hEvent=0x284) returned 1 [0080.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0080.308] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=22720) returned 1 [0080.308] CloseHandle (hObject=0x368) returned 1 [0080.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20 [0080.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20 [0080.308] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.308] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0080.309] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.309] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.309] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x318 [0080.309] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x58c0, lpOverlapped=0x0) returned 1 [0080.311] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x58d0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x58d0, lpOverlapped=0x0) returned 1 [0080.312] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x122, lpOverlapped=0x0) returned 1 [0080.312] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.313] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.313] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x58c0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x58c0, lpOverlapped=0x0) returned 1 [0080.313] FlushFileBuffers (hFile=0x368) returned 1 [0080.315] FlushFileBuffers (hFile=0x318) returned 1 [0080.319] CloseHandle (hObject=0x368) returned 1 [0080.319] CloseHandle (hObject=0x318) returned 1 [0080.319] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 1 [0080.320] SetEvent (hEvent=0x284) returned 1 [0080.320] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0080.321] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=19136) returned 1 [0080.321] CloseHandle (hObject=0x318) returned 1 [0080.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20 [0080.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20 [0080.321] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0080.322] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.322] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.322] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0080.322] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4ac0, lpOverlapped=0x0) returned 1 [0080.324] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4ad0, lpOverlapped=0x0) returned 1 [0080.325] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x122, lpOverlapped=0x0) returned 1 [0080.325] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.325] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.325] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4ac0, lpOverlapped=0x0) returned 1 [0080.325] FlushFileBuffers (hFile=0x318) returned 1 [0080.438] FlushFileBuffers (hFile=0x368) returned 1 [0080.439] CloseHandle (hObject=0x318) returned 1 [0080.439] CloseHandle (hObject=0x368) returned 1 [0080.439] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 1 [0080.441] SetEvent (hEvent=0x284) returned 1 [0080.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0080.441] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=19136) returned 1 [0080.441] CloseHandle (hObject=0x368) returned 1 [0080.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20 [0080.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20 [0080.441] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0080.441] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.441] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.441] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x318 [0080.442] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x4ac0, lpOverlapped=0x0) returned 1 [0080.444] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x4ad0, lpOverlapped=0x0) returned 1 [0080.446] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x122, lpOverlapped=0x0) returned 1 [0080.446] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.446] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.446] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x4ac0, lpOverlapped=0x0) returned 1 [0080.446] FlushFileBuffers (hFile=0x368) returned 1 [0080.449] FlushFileBuffers (hFile=0x318) returned 1 [0080.450] CloseHandle (hObject=0x368) returned 1 [0080.450] CloseHandle (hObject=0x318) returned 1 [0080.451] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 1 [0080.452] SetEvent (hEvent=0x284) returned 1 [0080.452] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0080.453] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=27840) returned 1 [0080.453] CloseHandle (hObject=0x318) returned 1 [0080.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20 [0080.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20 [0080.454] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0080.454] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.454] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.454] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0080.454] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x6cc0, lpOverlapped=0x0) returned 1 [0080.456] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x6cd0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x6cd0, lpOverlapped=0x0) returned 1 [0080.457] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x112, lpOverlapped=0x0) returned 1 [0080.457] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.457] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.457] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x6cc0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x6cc0, lpOverlapped=0x0) returned 1 [0080.458] FlushFileBuffers (hFile=0x318) returned 1 [0080.807] FlushFileBuffers (hFile=0x368) returned 1 [0080.889] CloseHandle (hObject=0x318) returned 1 [0080.890] CloseHandle (hObject=0x368) returned 1 [0080.890] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 1 [0080.891] SetEvent (hEvent=0x284) returned 1 [0080.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0080.892] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=70848) returned 1 [0080.892] CloseHandle (hObject=0x368) returned 1 [0080.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20 [0080.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20 [0080.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.892] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0080.892] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.892] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0080.893] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x318 [0080.893] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x114c0, lpOverlapped=0x0) returned 1 [0080.897] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x114d0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x114d0, lpOverlapped=0x0) returned 1 [0080.898] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x122, lpOverlapped=0x0) returned 1 [0080.899] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.899] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0080.899] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x114c0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x114c0, lpOverlapped=0x0) returned 1 [0080.899] FlushFileBuffers (hFile=0x368) returned 1 [0081.046] FlushFileBuffers (hFile=0x318) returned 1 [0081.081] CloseHandle (hObject=0x368) returned 1 [0081.082] CloseHandle (hObject=0x318) returned 1 [0081.082] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 1 [0081.084] SetEvent (hEvent=0x284) returned 1 [0081.084] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0081.088] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=23232) returned 1 [0081.088] CloseHandle (hObject=0x318) returned 1 [0081.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20 [0081.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20 [0081.088] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0081.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0081.088] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0081.088] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0081.088] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0081.089] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x5ac0, lpOverlapped=0x0) returned 1 [0081.091] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x5ad0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x5ad0, lpOverlapped=0x0) returned 1 [0081.092] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x122, lpOverlapped=0x0) returned 1 [0081.092] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0081.092] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0081.092] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x5ac0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x5ac0, lpOverlapped=0x0) returned 1 [0081.093] FlushFileBuffers (hFile=0x318) returned 1 [0081.149] FlushFileBuffers (hFile=0x368) returned 1 [0081.285] CloseHandle (hObject=0x318) returned 1 [0081.285] CloseHandle (hObject=0x368) returned 1 [0081.286] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 1 [0081.287] SetEvent (hEvent=0x284) returned 1 [0081.288] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0081.288] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=24768) returned 1 [0081.288] CloseHandle (hObject=0x368) returned 1 [0081.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20 [0081.288] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20 [0081.289] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0081.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0081.289] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0081.289] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0081.289] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x318 [0081.289] ReadFile (in: hFile=0x368, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x60c0, lpOverlapped=0x0) returned 1 [0081.326] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x60d0, lpOverlapped=0x0) returned 1 [0081.328] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x122, lpOverlapped=0x0) returned 1 [0081.328] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0081.328] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0081.328] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x60c0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x60c0, lpOverlapped=0x0) returned 1 [0081.329] FlushFileBuffers (hFile=0x368) returned 1 [0081.513] FlushFileBuffers (hFile=0x318) returned 1 [0081.539] CloseHandle (hObject=0x368) returned 1 [0081.539] CloseHandle (hObject=0x318) returned 1 [0081.540] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 1 [0081.541] SetEvent (hEvent=0x284) returned 1 [0081.541] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0081.541] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=307416) returned 1 [0081.541] CloseHandle (hObject=0x318) returned 1 [0081.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20 [0081.541] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20 [0081.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0081.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0081.542] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0081.542] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=2118360) returned 1 [0081.542] CloseHandle (hObject=0x318) returned 1 [0081.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 0x20 [0081.542] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 1 [0081.543] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0081.543] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 1 [0081.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0081.544] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=468696) returned 1 [0081.544] CloseHandle (hObject=0x318) returned 1 [0081.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20 [0081.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20 [0081.544] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0081.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0081.544] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0081.545] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x546fd60 | out: lpFileSize=0x546fd60*=396960) returned 1 [0081.545] CloseHandle (hObject=0x318) returned 1 [0081.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20 [0081.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20 [0081.545] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0081.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0081.545] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0081.545] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fd28 | out: lpNewFilePointer=0x0) returned 1 [0081.545] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0081.545] ReadFile (in: hFile=0x318, lpBuffer=0x55f6020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x546fd3c, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesRead=0x546fd3c*=0x60ea0, lpOverlapped=0x0) returned 1 [0081.553] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x60eb0, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x60eb0, lpOverlapped=0x0) returned 1 [0081.561] WriteFile (in: hFile=0x368, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x546fd14, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fd14*=0x102, lpOverlapped=0x0) returned 1 [0081.561] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0081.561] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x546fa88 | out: lpNewFilePointer=0x0) returned 1 [0081.561] WriteFile (in: hFile=0x318, lpBuffer=0x55f6020*, nNumberOfBytesToWrite=0x60ea0, lpNumberOfBytesWritten=0x546fa94, lpOverlapped=0x0 | out: lpBuffer=0x55f6020*, lpNumberOfBytesWritten=0x546fa94*=0x60ea0, lpOverlapped=0x0) returned 1 [0081.562] FlushFileBuffers (hFile=0x318) Thread: id = 20 os_tid = 0x770 [0055.235] GetProcessHeap () returned 0x3150000 [0055.235] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x3238fc0 [0055.236] GetProcessHeap () returned 0x3150000 [0055.236] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5710048 [0055.237] GetProcessHeap () returned 0x3150000 [0055.237] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x28) returned 0x320fd30 [0055.237] GetProcessHeap () returned 0x3150000 [0055.237] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x110102) returned 0x581e020 [0055.239] GetProcessHeap () returned 0x3150000 [0055.239] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x50) returned 0x3170ac0 [0055.240] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0055.240] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0055.240] Wow64DisableWow64FsRedirection (in: OldValue=0x54efc48 | out: OldValue=0x54efc48*=0x0) returned 1 [0055.240] GetProcessHeap () returned 0x3150000 [0055.240] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170ac0 | out: hHeap=0x3150000) returned 1 [0055.240] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8 [0055.529] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=6004) returned 1 [0055.529] CloseHandle (hObject=0x2b8) returned 1 [0055.529] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20 [0055.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20 [0055.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0055.530] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8 [0055.530] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0055.530] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0055.530] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f8 [0055.531] ReadFile (in: hFile=0x2b8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x1774, lpOverlapped=0x0) returned 1 [0055.560] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x1780, lpOverlapped=0x0) returned 1 [0055.561] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x122, lpOverlapped=0x0) returned 1 [0055.562] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0055.562] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0055.562] WriteFile (in: hFile=0x2b8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x1774, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x1774, lpOverlapped=0x0) returned 1 [0055.562] FlushFileBuffers (hFile=0x2b8) returned 1 [0056.032] FlushFileBuffers (hFile=0x2f8) returned 1 [0056.039] CloseHandle (hObject=0x2b8) returned 1 [0056.040] CloseHandle (hObject=0x2f8) returned 1 [0056.049] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 1 [0056.051] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0056.051] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=40) returned 1 [0056.051] CloseHandle (hObject=0x2f8) returned 1 [0056.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20 [0056.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20 [0056.051] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.051] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0056.051] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.051] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.051] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2b8 [0056.051] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x28, lpOverlapped=0x0) returned 1 [0056.054] WriteFile (in: hFile=0x2b8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x30, lpOverlapped=0x0) returned 1 [0056.056] WriteFile (in: hFile=0x2b8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x112, lpOverlapped=0x0) returned 1 [0056.057] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.058] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.058] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x28, lpOverlapped=0x0) returned 1 [0056.058] FlushFileBuffers (hFile=0x2f8) returned 1 [0056.074] FlushFileBuffers (hFile=0x2b8) returned 1 [0056.087] CloseHandle (hObject=0x2f8) returned 1 [0056.088] CloseHandle (hObject=0x2b8) returned 1 [0056.088] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 1 [0056.089] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8 [0056.091] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=156) returned 1 [0056.091] CloseHandle (hObject=0x2b8) returned 1 [0056.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0x20 [0056.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0x20 [0056.091] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.091] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8 [0056.091] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.092] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.092] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f8 [0056.092] ReadFile (in: hFile=0x2b8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x9c, lpOverlapped=0x0) returned 1 [0056.093] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xa0, lpOverlapped=0x0) returned 1 [0056.094] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0056.094] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.094] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.094] WriteFile (in: hFile=0x2b8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x9c, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x9c, lpOverlapped=0x0) returned 1 [0056.094] FlushFileBuffers (hFile=0x2b8) returned 1 [0056.098] FlushFileBuffers (hFile=0x2f8) returned 1 [0056.100] CloseHandle (hObject=0x2b8) returned 1 [0056.101] CloseHandle (hObject=0x2f8) returned 1 [0056.103] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 1 [0056.104] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0056.104] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=577) returned 1 [0056.104] CloseHandle (hObject=0x2f8) returned 1 [0056.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0x20 [0056.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0x20 [0056.105] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.105] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0056.105] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.105] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.105] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2b8 [0056.105] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x241, lpOverlapped=0x0) returned 1 [0056.109] WriteFile (in: hFile=0x2b8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x250, lpOverlapped=0x0) returned 1 [0056.110] WriteFile (in: hFile=0x2b8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x112, lpOverlapped=0x0) returned 1 [0056.110] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.110] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.110] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x241, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x241, lpOverlapped=0x0) returned 1 [0056.110] FlushFileBuffers (hFile=0x2f8) returned 1 [0056.112] FlushFileBuffers (hFile=0x2b8) returned 1 [0056.113] CloseHandle (hObject=0x2f8) returned 1 [0056.114] CloseHandle (hObject=0x2b8) returned 1 [0056.118] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 1 [0056.119] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8 [0056.120] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=74) returned 1 [0056.120] CloseHandle (hObject=0x2b8) returned 1 [0056.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0x20 [0056.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0x20 [0056.120] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.120] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8 [0056.120] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.121] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.121] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f8 [0056.121] ReadFile (in: hFile=0x2b8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4a, lpOverlapped=0x0) returned 1 [0056.122] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x50, lpOverlapped=0x0) returned 1 [0056.124] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0056.124] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.124] SetFilePointerEx (in: hFile=0x2b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.124] WriteFile (in: hFile=0x2b8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4a, lpOverlapped=0x0) returned 1 [0056.124] FlushFileBuffers (hFile=0x2b8) returned 1 [0056.205] FlushFileBuffers (hFile=0x2f8) returned 1 [0056.208] CloseHandle (hObject=0x2b8) returned 1 [0056.209] CloseHandle (hObject=0x2f8) returned 1 [0056.210] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 1 [0056.211] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0056.221] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=307) returned 1 [0056.221] CloseHandle (hObject=0x33c) returned 1 [0056.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0x20 [0056.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0x20 [0056.221] GetFileAttributesW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.221] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0056.221] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.222] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.222] CreateFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2f8 [0056.223] ReadFile (in: hFile=0x33c, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x133, lpOverlapped=0x0) returned 1 [0056.224] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x140, lpOverlapped=0x0) returned 1 [0056.225] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0056.227] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.227] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.227] WriteFile (in: hFile=0x33c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x133, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x133, lpOverlapped=0x0) returned 1 [0056.227] FlushFileBuffers (hFile=0x33c) returned 1 [0056.437] FlushFileBuffers (hFile=0x2f8) returned 1 [0056.438] CloseHandle (hObject=0x33c) returned 1 [0056.439] CloseHandle (hObject=0x2f8) returned 1 [0056.444] DeleteFileW (lpFileName="\\\\?\\C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 1 [0056.445] SetEvent (hEvent=0x284) returned 1 [0056.445] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0056.446] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=129) returned 1 [0056.446] CloseHandle (hObject=0x2f8) returned 1 [0056.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 0x26 [0056.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 0x26 [0056.446] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.446] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0056.446] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.446] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.446] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x33c [0056.447] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x81, lpOverlapped=0x0) returned 1 [0056.448] WriteFile (in: hFile=0x33c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x90, lpOverlapped=0x0) returned 1 [0056.449] WriteFile (in: hFile=0x33c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0056.449] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.450] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.450] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x81, lpOverlapped=0x0) returned 1 [0056.450] FlushFileBuffers (hFile=0x2f8) returned 1 [0056.452] FlushFileBuffers (hFile=0x33c) returned 1 [0056.454] CloseHandle (hObject=0x2f8) returned 1 [0056.455] CloseHandle (hObject=0x33c) returned 1 [0056.458] DeleteFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 1 [0056.459] SetEvent (hEvent=0x284) returned 1 [0056.459] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0056.460] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=129) returned 1 [0056.460] CloseHandle (hObject=0x33c) returned 1 [0056.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0056.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26 [0056.460] GetFileAttributesW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.460] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0056.460] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.460] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.460] CreateFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2f8 [0056.460] ReadFile (in: hFile=0x33c, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x81, lpOverlapped=0x0) returned 1 [0056.461] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x90, lpOverlapped=0x0) returned 1 [0056.462] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0056.462] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.462] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.462] WriteFile (in: hFile=0x33c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x81, lpOverlapped=0x0) returned 1 [0056.462] FlushFileBuffers (hFile=0x33c) returned 1 [0056.465] FlushFileBuffers (hFile=0x2f8) returned 1 [0056.467] CloseHandle (hObject=0x33c) returned 1 [0056.467] CloseHandle (hObject=0x2f8) returned 1 [0056.468] DeleteFileW (lpFileName="\\\\?\\C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 1 [0056.469] SetEvent (hEvent=0x284) returned 1 [0056.469] CreateFileW (lpFileName="\\\\?\\C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0056.471] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=0) returned 1 [0056.471] CloseHandle (hObject=0x2f8) returned 1 [0056.472] SetEvent (hEvent=0x284) returned 1 [0056.472] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0056.472] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=7567) returned 1 [0056.472] CloseHandle (hObject=0x2f8) returned 1 [0056.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80 [0056.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80 [0056.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.473] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0056.473] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.473] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.473] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c [0056.474] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x1d8f, lpOverlapped=0x0) returned 1 [0056.476] WriteFile (in: hFile=0x33c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x1d90, lpOverlapped=0x0) returned 1 [0056.477] WriteFile (in: hFile=0x33c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0056.477] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.477] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.477] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x1d8f, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x1d8f, lpOverlapped=0x0) returned 1 [0056.477] FlushFileBuffers (hFile=0x2f8) returned 1 [0056.479] FlushFileBuffers (hFile=0x33c) returned 1 [0056.480] CloseHandle (hObject=0x2f8) returned 1 [0056.481] CloseHandle (hObject=0x33c) returned 1 [0056.485] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 1 [0056.486] SetEvent (hEvent=0x284) returned 1 [0056.486] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0056.486] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=74214) returned 1 [0056.486] CloseHandle (hObject=0x33c) returned 1 [0056.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80 [0056.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80 [0056.486] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.486] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c [0056.487] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.487] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.487] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0056.487] ReadFile (in: hFile=0x33c, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x121e6, lpOverlapped=0x0) returned 1 [0056.490] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x121f0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x121f0, lpOverlapped=0x0) returned 1 [0056.492] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0056.492] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.492] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.492] WriteFile (in: hFile=0x33c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x121e6, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x121e6, lpOverlapped=0x0) returned 1 [0056.492] FlushFileBuffers (hFile=0x33c) returned 1 [0056.956] FlushFileBuffers (hFile=0x2f8) returned 1 [0056.957] CloseHandle (hObject=0x33c) returned 1 [0056.960] CloseHandle (hObject=0x2f8) returned 1 [0056.962] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 1 [0056.963] SetEvent (hEvent=0x284) returned 1 [0056.963] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0056.964] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=14168) returned 1 [0056.964] CloseHandle (hObject=0x2f8) returned 1 [0056.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 0x80 [0056.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 0x80 [0056.964] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0056.964] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0056.964] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.964] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0056.965] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c [0056.965] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x3758, lpOverlapped=0x0) returned 1 [0056.968] WriteFile (in: hFile=0x33c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x3760, lpOverlapped=0x0) returned 1 [0056.969] WriteFile (in: hFile=0x33c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0056.969] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.969] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0056.969] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3758, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x3758, lpOverlapped=0x0) returned 1 [0056.970] FlushFileBuffers (hFile=0x2f8) returned 1 [0057.246] FlushFileBuffers (hFile=0x33c) returned 1 [0057.258] CloseHandle (hObject=0x2f8) returned 1 [0057.259] CloseHandle (hObject=0x33c) returned 1 [0057.260] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 1 [0057.261] SetEvent (hEvent=0x284) returned 1 [0057.261] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0057.266] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=80970) returned 1 [0057.266] CloseHandle (hObject=0x2f8) returned 1 [0057.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80 [0057.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80 [0057.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0057.266] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0057.266] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0057.266] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0057.266] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0057.267] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x13c4a, lpOverlapped=0x0) returned 1 [0057.274] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x13c50, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x13c50, lpOverlapped=0x0) returned 1 [0057.276] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0057.276] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0057.276] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0057.276] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x13c4a, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x13c4a, lpOverlapped=0x0) returned 1 [0057.277] FlushFileBuffers (hFile=0x2f8) returned 1 [0057.678] FlushFileBuffers (hFile=0x2bc) returned 1 [0057.679] CloseHandle (hObject=0x2f8) returned 1 [0057.682] CloseHandle (hObject=0x2bc) returned 1 [0057.684] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 1 [0057.686] SetEvent (hEvent=0x284) returned 1 [0057.686] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0057.686] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=3314) returned 1 [0057.686] CloseHandle (hObject=0x2bc) returned 1 [0057.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80 [0057.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80 [0057.686] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0057.687] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0057.687] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0057.687] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0057.687] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0057.688] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0xcf2, lpOverlapped=0x0) returned 1 [0057.690] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xd00, lpOverlapped=0x0) returned 1 [0057.691] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0057.691] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0057.691] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0057.691] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xcf2, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0xcf2, lpOverlapped=0x0) returned 1 [0057.691] FlushFileBuffers (hFile=0x2bc) returned 1 [0057.693] FlushFileBuffers (hFile=0x2f8) returned 1 [0057.694] CloseHandle (hObject=0x2bc) returned 1 [0057.695] CloseHandle (hObject=0x2f8) returned 1 [0057.695] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 1 [0057.696] SetEvent (hEvent=0x284) returned 1 [0057.697] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0057.697] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=77748) returned 1 [0057.697] CloseHandle (hObject=0x2f8) returned 1 [0057.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80 [0057.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80 [0057.697] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0057.697] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0057.697] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0057.697] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0057.697] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0057.697] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x12fb4, lpOverlapped=0x0) returned 1 [0057.700] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x12fc0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x12fc0, lpOverlapped=0x0) returned 1 [0057.702] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0057.702] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0057.702] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0057.703] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x12fb4, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x12fb4, lpOverlapped=0x0) returned 1 [0057.703] FlushFileBuffers (hFile=0x2f8) returned 1 [0058.072] FlushFileBuffers (hFile=0x2bc) returned 1 [0058.075] CloseHandle (hObject=0x2f8) returned 1 [0058.079] CloseHandle (hObject=0x2bc) returned 1 [0058.082] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 1 [0058.084] SetEvent (hEvent=0x284) returned 1 [0058.084] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0058.085] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=3419) returned 1 [0058.085] CloseHandle (hObject=0x2bc) returned 1 [0058.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80 [0058.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80 [0058.085] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0058.085] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0058.085] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0058.085] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0058.085] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0058.089] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0xd5b, lpOverlapped=0x0) returned 1 [0058.090] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xd60, lpOverlapped=0x0) returned 1 [0058.091] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0058.091] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0058.091] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0058.091] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xd5b, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0xd5b, lpOverlapped=0x0) returned 1 [0058.092] FlushFileBuffers (hFile=0x2bc) returned 1 [0058.093] FlushFileBuffers (hFile=0x2f8) returned 1 [0058.094] CloseHandle (hObject=0x2bc) returned 1 [0058.095] CloseHandle (hObject=0x2f8) returned 1 [0058.096] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 1 [0058.097] SetEvent (hEvent=0x284) returned 1 [0058.097] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0058.097] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=82346) returned 1 [0058.097] CloseHandle (hObject=0x2f8) returned 1 [0058.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80 [0058.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80 [0058.097] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0058.097] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0058.097] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0058.097] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0058.097] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0058.098] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x141aa, lpOverlapped=0x0) returned 1 [0058.104] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x141b0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x141b0, lpOverlapped=0x0) returned 1 [0058.106] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0058.106] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0058.106] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0058.106] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x141aa, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x141aa, lpOverlapped=0x0) returned 1 [0058.106] FlushFileBuffers (hFile=0x2f8) returned 1 [0058.108] FlushFileBuffers (hFile=0x2bc) returned 1 [0058.109] CloseHandle (hObject=0x2f8) returned 1 [0058.116] CloseHandle (hObject=0x2bc) returned 1 [0058.118] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 1 [0058.119] SetEvent (hEvent=0x284) returned 1 [0058.120] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0058.121] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=18776) returned 1 [0058.121] CloseHandle (hObject=0x2bc) returned 1 [0058.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 0x80 [0058.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 0x80 [0058.121] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0058.121] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0058.121] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0058.121] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0058.121] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0058.122] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4958, lpOverlapped=0x0) returned 1 [0058.123] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4960, lpOverlapped=0x0) returned 1 [0058.125] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0058.125] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0058.125] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0058.125] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4958, lpOverlapped=0x0) returned 1 [0058.125] FlushFileBuffers (hFile=0x2bc) returned 1 [0058.710] FlushFileBuffers (hFile=0x2f8) returned 1 [0058.711] CloseHandle (hObject=0x2bc) returned 1 [0058.713] CloseHandle (hObject=0x2f8) returned 1 [0058.714] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 1 [0058.715] SetEvent (hEvent=0x284) returned 1 [0058.715] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0058.715] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=19288) returned 1 [0058.715] CloseHandle (hObject=0x2f8) returned 1 [0058.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 0x80 [0058.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 0x80 [0058.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0058.716] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0058.716] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0058.716] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0058.716] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0058.716] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4b58, lpOverlapped=0x0) returned 1 [0058.718] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4b60, lpOverlapped=0x0) returned 1 [0058.719] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0058.720] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0058.720] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0058.720] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4b58, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4b58, lpOverlapped=0x0) returned 1 [0058.720] FlushFileBuffers (hFile=0x2f8) returned 1 [0059.171] FlushFileBuffers (hFile=0x2bc) returned 1 [0059.173] CloseHandle (hObject=0x2f8) returned 1 [0059.174] CloseHandle (hObject=0x2bc) returned 1 [0059.175] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 1 [0059.176] SetEvent (hEvent=0x284) returned 1 [0059.176] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0059.177] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=17240) returned 1 [0059.177] CloseHandle (hObject=0x2bc) returned 1 [0059.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 0x80 [0059.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 0x80 [0059.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0059.177] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0059.177] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0059.177] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0059.177] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0059.177] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4358, lpOverlapped=0x0) returned 1 [0059.180] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4360, lpOverlapped=0x0) returned 1 [0059.181] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0059.181] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0059.182] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0059.182] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4358, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4358, lpOverlapped=0x0) returned 1 [0059.182] FlushFileBuffers (hFile=0x2bc) returned 1 [0059.367] FlushFileBuffers (hFile=0x2f8) returned 1 [0059.368] CloseHandle (hObject=0x2bc) returned 1 [0059.369] CloseHandle (hObject=0x2f8) returned 1 [0059.370] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 1 [0059.371] SetEvent (hEvent=0x284) returned 1 [0059.372] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0059.372] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=18264) returned 1 [0059.372] CloseHandle (hObject=0x2f8) returned 1 [0059.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 0x80 [0059.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 0x80 [0059.372] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0059.372] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0059.373] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0059.373] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0059.373] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0059.373] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4758, lpOverlapped=0x0) returned 1 [0059.376] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4760, lpOverlapped=0x0) returned 1 [0059.377] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0059.377] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0059.378] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0059.378] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4758, lpOverlapped=0x0) returned 1 [0059.378] FlushFileBuffers (hFile=0x2f8) returned 1 [0059.777] FlushFileBuffers (hFile=0x2bc) returned 1 [0059.778] CloseHandle (hObject=0x2f8) returned 1 [0059.779] CloseHandle (hObject=0x2bc) returned 1 [0059.780] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 1 [0059.781] SetEvent (hEvent=0x284) returned 1 [0059.781] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0059.781] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=18776) returned 1 [0059.781] CloseHandle (hObject=0x2bc) returned 1 [0059.781] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 0x80 [0059.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 0x80 [0059.782] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0059.782] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0059.782] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0059.782] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0059.782] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0059.782] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4958, lpOverlapped=0x0) returned 1 [0059.784] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4960, lpOverlapped=0x0) returned 1 [0059.785] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0059.785] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0059.785] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0059.785] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4958, lpOverlapped=0x0) returned 1 [0059.785] FlushFileBuffers (hFile=0x2bc) returned 1 [0059.995] FlushFileBuffers (hFile=0x2f8) returned 1 [0059.997] CloseHandle (hObject=0x2bc) returned 1 [0059.997] CloseHandle (hObject=0x2f8) returned 1 [0059.999] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 1 [0060.000] SetEvent (hEvent=0x284) returned 1 [0060.000] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0060.001] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=16728) returned 1 [0060.001] CloseHandle (hObject=0x2f8) returned 1 [0060.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 0x80 [0060.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 0x80 [0060.001] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0060.001] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0060.001] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0060.001] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0060.001] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0060.002] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4158, lpOverlapped=0x0) returned 1 [0060.003] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4160, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4160, lpOverlapped=0x0) returned 1 [0060.004] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0060.005] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0060.005] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0060.005] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4158, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4158, lpOverlapped=0x0) returned 1 [0060.005] FlushFileBuffers (hFile=0x2f8) returned 1 [0060.406] FlushFileBuffers (hFile=0x2bc) returned 1 [0060.408] CloseHandle (hObject=0x2f8) returned 1 [0060.409] CloseHandle (hObject=0x2bc) returned 1 [0060.410] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 1 [0060.412] SetEvent (hEvent=0x284) returned 1 [0060.412] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0060.413] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=18776) returned 1 [0060.413] CloseHandle (hObject=0x2bc) returned 1 [0060.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 0x80 [0060.413] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 0x80 [0060.414] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0060.414] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0060.414] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0060.414] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0060.414] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0060.414] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4958, lpOverlapped=0x0) returned 1 [0060.430] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4960, lpOverlapped=0x0) returned 1 [0060.469] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0060.469] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0060.469] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0060.469] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4958, lpOverlapped=0x0) returned 1 [0060.470] FlushFileBuffers (hFile=0x2bc) returned 1 [0061.145] FlushFileBuffers (hFile=0x2f8) returned 1 [0061.174] CloseHandle (hObject=0x2bc) returned 1 [0061.175] CloseHandle (hObject=0x2f8) returned 1 [0061.176] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 1 [0061.177] SetEvent (hEvent=0x284) returned 1 [0061.177] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0061.177] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=10125) returned 1 [0061.177] CloseHandle (hObject=0x2f8) returned 1 [0061.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80 [0061.177] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80 [0061.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.178] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0061.178] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.178] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.178] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0061.183] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x278d, lpOverlapped=0x0) returned 1 [0061.185] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x2790, lpOverlapped=0x0) returned 1 [0061.186] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0061.186] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.186] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.186] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x278d, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x278d, lpOverlapped=0x0) returned 1 [0061.186] FlushFileBuffers (hFile=0x2f8) returned 1 [0061.380] FlushFileBuffers (hFile=0x2bc) returned 1 [0061.392] CloseHandle (hObject=0x2f8) returned 1 [0061.392] CloseHandle (hObject=0x2bc) returned 1 [0061.393] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 1 [0061.394] SetEvent (hEvent=0x284) returned 1 [0061.395] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0061.395] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=15704) returned 1 [0061.395] CloseHandle (hObject=0x2bc) returned 1 [0061.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 0x80 [0061.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 0x80 [0061.395] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.395] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0061.395] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.395] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.395] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0061.395] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x3d58, lpOverlapped=0x0) returned 1 [0061.398] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3d60, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x3d60, lpOverlapped=0x0) returned 1 [0061.400] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0061.400] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.400] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.400] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3d58, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x3d58, lpOverlapped=0x0) returned 1 [0061.400] FlushFileBuffers (hFile=0x2bc) returned 1 [0061.418] FlushFileBuffers (hFile=0x2f8) returned 1 [0061.425] CloseHandle (hObject=0x2bc) returned 1 [0061.426] CloseHandle (hObject=0x2f8) returned 1 [0061.427] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 1 [0061.428] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0061.428] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=15192) returned 1 [0061.428] CloseHandle (hObject=0x2f8) returned 1 [0061.442] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 0x80 [0061.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 0x80 [0061.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.443] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0061.443] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.443] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.443] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2bc [0061.443] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x3b58, lpOverlapped=0x0) returned 1 [0061.471] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x3b60, lpOverlapped=0x0) returned 1 [0061.472] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0061.472] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.472] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.472] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3b58, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x3b58, lpOverlapped=0x0) returned 1 [0061.472] FlushFileBuffers (hFile=0x2f8) returned 1 [0061.639] FlushFileBuffers (hFile=0x2bc) returned 1 [0061.648] CloseHandle (hObject=0x2f8) returned 1 [0061.649] CloseHandle (hObject=0x2bc) returned 1 [0061.650] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 1 [0061.651] SetEvent (hEvent=0x284) returned 1 [0061.651] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0061.654] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=79634) returned 1 [0061.654] CloseHandle (hObject=0x2f8) returned 1 [0061.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80 [0061.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80 [0061.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.654] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0061.654] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.654] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.654] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0061.654] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x13712, lpOverlapped=0x0) returned 1 [0061.659] WriteFile (in: hFile=0x340, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x13720, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x13720, lpOverlapped=0x0) returned 1 [0061.661] WriteFile (in: hFile=0x340, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0061.662] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.662] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.662] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x13712, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x13712, lpOverlapped=0x0) returned 1 [0061.662] FlushFileBuffers (hFile=0x2f8) returned 1 [0061.858] FlushFileBuffers (hFile=0x340) returned 1 [0061.859] CloseHandle (hObject=0x2f8) returned 1 [0061.862] CloseHandle (hObject=0x340) returned 1 [0061.864] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 1 [0061.865] SetEvent (hEvent=0x284) returned 1 [0061.866] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0061.866] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=3046) returned 1 [0061.866] CloseHandle (hObject=0x340) returned 1 [0061.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80 [0061.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80 [0061.866] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.866] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0061.866] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.866] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.866] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0061.868] ReadFile (in: hFile=0x340, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0xbe6, lpOverlapped=0x0) returned 1 [0061.869] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xbf0, lpOverlapped=0x0) returned 1 [0061.870] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0061.871] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.871] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.871] WriteFile (in: hFile=0x340, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xbe6, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0xbe6, lpOverlapped=0x0) returned 1 [0061.871] FlushFileBuffers (hFile=0x340) returned 1 [0061.873] FlushFileBuffers (hFile=0x2f8) returned 1 [0061.875] CloseHandle (hObject=0x340) returned 1 [0061.876] CloseHandle (hObject=0x2f8) returned 1 [0061.877] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 1 [0061.878] SetEvent (hEvent=0x284) returned 1 [0061.878] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0061.878] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=79296) returned 1 [0061.878] CloseHandle (hObject=0x2f8) returned 1 [0061.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80 [0061.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80 [0061.878] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.878] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0061.878] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.878] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.878] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0061.879] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x135c0, lpOverlapped=0x0) returned 1 [0061.888] WriteFile (in: hFile=0x340, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x135d0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x135d0, lpOverlapped=0x0) returned 1 [0061.890] WriteFile (in: hFile=0x340, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0061.890] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.890] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.890] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x135c0, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x135c0, lpOverlapped=0x0) returned 1 [0061.890] FlushFileBuffers (hFile=0x2f8) returned 1 [0061.945] FlushFileBuffers (hFile=0x340) returned 1 [0061.947] CloseHandle (hObject=0x2f8) returned 1 [0061.949] CloseHandle (hObject=0x340) returned 1 [0061.952] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 1 [0061.953] SetEvent (hEvent=0x284) returned 1 [0061.953] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0061.954] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=4040) returned 1 [0061.954] CloseHandle (hObject=0x340) returned 1 [0061.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80 [0061.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80 [0061.954] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.954] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0061.954] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.954] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.954] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0061.956] ReadFile (in: hFile=0x340, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0xfc8, lpOverlapped=0x0) returned 1 [0061.957] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xfd0, lpOverlapped=0x0) returned 1 [0061.958] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0061.958] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.959] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.959] WriteFile (in: hFile=0x340, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xfc8, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0xfc8, lpOverlapped=0x0) returned 1 [0061.959] FlushFileBuffers (hFile=0x340) returned 1 [0061.965] FlushFileBuffers (hFile=0x2f8) returned 1 [0061.984] CloseHandle (hObject=0x340) returned 1 [0061.985] CloseHandle (hObject=0x2f8) returned 1 [0061.987] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 1 [0061.988] SetEvent (hEvent=0x284) returned 1 [0061.988] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0061.988] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=18264) returned 1 [0061.988] CloseHandle (hObject=0x2f8) returned 1 [0061.988] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 0x80 [0061.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 0x80 [0061.989] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0061.989] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0061.989] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.989] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0061.989] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340 [0061.989] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4758, lpOverlapped=0x0) returned 1 [0061.995] WriteFile (in: hFile=0x340, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4760, lpOverlapped=0x0) returned 1 [0061.997] WriteFile (in: hFile=0x340, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0061.997] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.997] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0061.997] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4758, lpOverlapped=0x0) returned 1 [0061.997] FlushFileBuffers (hFile=0x2f8) returned 1 [0062.047] FlushFileBuffers (hFile=0x340) returned 1 [0062.051] CloseHandle (hObject=0x2f8) returned 1 [0062.051] CloseHandle (hObject=0x340) returned 1 [0062.053] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 1 [0062.054] SetEvent (hEvent=0x284) returned 1 [0062.054] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0062.055] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=80738) returned 1 [0062.055] CloseHandle (hObject=0x340) returned 1 [0062.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80 [0062.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80 [0062.055] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.055] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340 [0062.056] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.056] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.056] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0062.056] ReadFile (in: hFile=0x340, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x13b62, lpOverlapped=0x0) returned 1 [0062.059] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x13b70, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x13b70, lpOverlapped=0x0) returned 1 [0062.061] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0062.061] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.061] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.061] WriteFile (in: hFile=0x340, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x13b62, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x13b62, lpOverlapped=0x0) returned 1 [0062.061] FlushFileBuffers (hFile=0x340) returned 1 [0062.108] FlushFileBuffers (hFile=0x2f8) returned 1 [0062.111] CloseHandle (hObject=0x340) returned 1 [0062.113] CloseHandle (hObject=0x2f8) returned 1 [0062.116] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 1 [0062.117] SetEvent (hEvent=0x284) returned 1 [0062.117] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0062.121] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=54456) returned 1 [0062.121] CloseHandle (hObject=0x368) returned 1 [0062.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80 [0062.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80 [0062.122] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.122] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0062.122] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.122] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.122] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0062.127] ReadFile (in: hFile=0x368, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0xd4b8, lpOverlapped=0x0) returned 1 [0062.131] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xd4c0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xd4c0, lpOverlapped=0x0) returned 1 [0062.132] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0062.133] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.133] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.133] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xd4b8, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0xd4b8, lpOverlapped=0x0) returned 1 [0062.133] FlushFileBuffers (hFile=0x368) returned 1 [0062.142] FlushFileBuffers (hFile=0x2fc) returned 1 [0062.144] CloseHandle (hObject=0x368) returned 1 [0062.146] CloseHandle (hObject=0x2fc) returned 1 [0062.148] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 1 [0062.150] SetEvent (hEvent=0x284) returned 1 [0062.150] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0062.150] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=18264) returned 1 [0062.150] CloseHandle (hObject=0x2fc) returned 1 [0062.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 0x80 [0062.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 0x80 [0062.150] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.150] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0062.151] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.151] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.151] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x368 [0062.151] ReadFile (in: hFile=0x2fc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4758, lpOverlapped=0x0) returned 1 [0062.153] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4760, lpOverlapped=0x0) returned 1 [0062.154] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0062.154] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.154] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.154] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4758, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4758, lpOverlapped=0x0) returned 1 [0062.155] FlushFileBuffers (hFile=0x2fc) returned 1 [0062.189] FlushFileBuffers (hFile=0x368) returned 1 [0062.201] CloseHandle (hObject=0x2fc) returned 1 [0062.201] CloseHandle (hObject=0x368) returned 1 [0062.203] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 1 [0062.204] SetEvent (hEvent=0x284) returned 1 [0062.204] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0062.204] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=77680) returned 1 [0062.204] CloseHandle (hObject=0x368) returned 1 [0062.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80 [0062.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80 [0062.204] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.204] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0062.204] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.205] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.205] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0062.205] ReadFile (in: hFile=0x368, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x12f70, lpOverlapped=0x0) returned 1 [0062.210] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x12f80, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x12f80, lpOverlapped=0x0) returned 1 [0062.212] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0062.213] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.213] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.213] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x12f70, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x12f70, lpOverlapped=0x0) returned 1 [0062.213] FlushFileBuffers (hFile=0x368) returned 1 [0062.510] FlushFileBuffers (hFile=0x2fc) returned 1 [0062.512] CloseHandle (hObject=0x368) returned 1 [0062.515] CloseHandle (hObject=0x2fc) returned 1 [0062.517] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 1 [0062.518] SetEvent (hEvent=0x284) returned 1 [0062.519] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0062.519] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=3859) returned 1 [0062.519] CloseHandle (hObject=0x2fc) returned 1 [0062.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80 [0062.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80 [0062.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.519] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0062.519] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.519] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.519] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x368 [0062.523] ReadFile (in: hFile=0x2fc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0xf13, lpOverlapped=0x0) returned 1 [0062.525] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf20, lpOverlapped=0x0) returned 1 [0062.526] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0062.526] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.526] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.526] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf13, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0xf13, lpOverlapped=0x0) returned 1 [0062.526] FlushFileBuffers (hFile=0x2fc) returned 1 [0062.528] FlushFileBuffers (hFile=0x368) returned 1 [0062.529] CloseHandle (hObject=0x2fc) returned 1 [0062.539] CloseHandle (hObject=0x368) returned 1 [0062.540] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 1 [0062.541] SetEvent (hEvent=0x284) returned 1 [0062.541] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0062.542] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=76818) returned 1 [0062.542] CloseHandle (hObject=0x368) returned 1 [0062.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80 [0062.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80 [0062.542] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.542] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0062.542] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.542] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.542] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0062.542] ReadFile (in: hFile=0x368, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x12c12, lpOverlapped=0x0) returned 1 [0062.545] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x12c20, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x12c20, lpOverlapped=0x0) returned 1 [0062.547] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0062.547] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.547] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.547] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x12c12, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x12c12, lpOverlapped=0x0) returned 1 [0062.548] FlushFileBuffers (hFile=0x368) returned 1 [0062.670] FlushFileBuffers (hFile=0x2fc) returned 1 [0062.681] CloseHandle (hObject=0x368) returned 1 [0062.684] CloseHandle (hObject=0x2fc) returned 1 [0062.686] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 1 [0062.687] SetEvent (hEvent=0x284) returned 1 [0062.687] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0062.688] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=5827) returned 1 [0062.688] CloseHandle (hObject=0x2fc) returned 1 [0062.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80 [0062.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80 [0062.688] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.688] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0062.688] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.688] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.688] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x308 [0062.693] ReadFile (in: hFile=0x2fc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x16c3, lpOverlapped=0x0) returned 1 [0062.695] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x16d0, lpOverlapped=0x0) returned 1 [0062.695] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0062.696] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.696] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.696] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x16c3, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x16c3, lpOverlapped=0x0) returned 1 [0062.696] FlushFileBuffers (hFile=0x2fc) returned 1 [0062.866] FlushFileBuffers (hFile=0x308) returned 1 [0062.867] CloseHandle (hObject=0x2fc) returned 1 [0062.868] CloseHandle (hObject=0x308) returned 1 [0062.869] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 1 [0062.870] SetEvent (hEvent=0x284) returned 1 [0062.870] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0062.870] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=14168) returned 1 [0062.870] CloseHandle (hObject=0x308) returned 1 [0062.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 0x80 [0062.870] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 0x80 [0062.871] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.871] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0062.871] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.871] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.871] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0062.871] ReadFile (in: hFile=0x308, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x3758, lpOverlapped=0x0) returned 1 [0062.875] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x3760, lpOverlapped=0x0) returned 1 [0062.876] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0062.876] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.876] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.876] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3758, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x3758, lpOverlapped=0x0) returned 1 [0062.876] FlushFileBuffers (hFile=0x308) returned 1 [0062.893] FlushFileBuffers (hFile=0x2fc) returned 1 [0062.899] CloseHandle (hObject=0x308) returned 1 [0062.900] CloseHandle (hObject=0x2fc) returned 1 [0062.901] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 1 [0062.902] SetEvent (hEvent=0x284) returned 1 [0062.902] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0062.902] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=80254) returned 1 [0062.902] CloseHandle (hObject=0x2fc) returned 1 [0062.902] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80 [0062.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80 [0062.903] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0062.903] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0062.903] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.903] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0062.903] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x308 [0062.903] ReadFile (in: hFile=0x2fc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x1397e, lpOverlapped=0x0) returned 1 [0062.907] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x13980, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x13980, lpOverlapped=0x0) returned 1 [0062.909] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0062.909] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.909] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0062.909] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x1397e, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x1397e, lpOverlapped=0x0) returned 1 [0062.910] FlushFileBuffers (hFile=0x2fc) returned 1 [0063.121] FlushFileBuffers (hFile=0x308) returned 1 [0063.125] CloseHandle (hObject=0x2fc) returned 1 [0063.128] CloseHandle (hObject=0x308) returned 1 [0063.131] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 1 [0063.132] SetEvent (hEvent=0x284) returned 1 [0063.132] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0063.132] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=6309) returned 1 [0063.132] CloseHandle (hObject=0x308) returned 1 [0063.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80 [0063.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80 [0063.133] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.133] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0063.133] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.133] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.133] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0063.135] ReadFile (in: hFile=0x308, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x18a5, lpOverlapped=0x0) returned 1 [0063.137] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x18b0, lpOverlapped=0x0) returned 1 [0063.138] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0063.138] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.138] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.138] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x18a5, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x18a5, lpOverlapped=0x0) returned 1 [0063.138] FlushFileBuffers (hFile=0x308) returned 1 [0063.157] FlushFileBuffers (hFile=0x2fc) returned 1 [0063.159] CloseHandle (hObject=0x308) returned 1 [0063.159] CloseHandle (hObject=0x2fc) returned 1 [0063.160] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 1 [0063.161] SetEvent (hEvent=0x284) returned 1 [0063.161] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0063.161] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=14168) returned 1 [0063.161] CloseHandle (hObject=0x2fc) returned 1 [0063.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 0x80 [0063.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 0x80 [0063.161] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.162] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0063.162] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.162] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.162] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x308 [0063.162] ReadFile (in: hFile=0x2fc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x3758, lpOverlapped=0x0) returned 1 [0063.164] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x3760, lpOverlapped=0x0) returned 1 [0063.165] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0063.165] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.165] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.165] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3758, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x3758, lpOverlapped=0x0) returned 1 [0063.165] FlushFileBuffers (hFile=0x2fc) returned 1 [0063.310] FlushFileBuffers (hFile=0x308) returned 1 [0063.322] CloseHandle (hObject=0x2fc) returned 1 [0063.323] CloseHandle (hObject=0x308) returned 1 [0063.326] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 1 [0063.327] SetEvent (hEvent=0x284) returned 1 [0063.327] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0063.327] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=18776) returned 1 [0063.327] CloseHandle (hObject=0x308) returned 1 [0063.328] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 0x80 [0063.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 0x80 [0063.329] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.329] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0063.329] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.329] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.329] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0063.329] ReadFile (in: hFile=0x308, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4958, lpOverlapped=0x0) returned 1 [0063.331] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4960, lpOverlapped=0x0) returned 1 [0063.332] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0063.332] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.332] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.332] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4958, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4958, lpOverlapped=0x0) returned 1 [0063.333] FlushFileBuffers (hFile=0x308) returned 1 [0063.396] FlushFileBuffers (hFile=0x2fc) returned 1 [0063.399] CloseHandle (hObject=0x308) returned 1 [0063.399] CloseHandle (hObject=0x2fc) returned 1 [0063.402] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 1 [0063.403] SetEvent (hEvent=0x284) returned 1 [0063.404] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0063.405] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=39042) returned 1 [0063.405] CloseHandle (hObject=0x2fc) returned 1 [0063.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 0x80 [0063.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 0x80 [0063.405] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.405] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0063.405] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.405] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.405] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0063.416] ReadFile (in: hFile=0x2fc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x9882, lpOverlapped=0x0) returned 1 [0063.421] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x9890, lpOverlapped=0x0) returned 1 [0063.423] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0063.423] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.423] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.423] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x9882, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x9882, lpOverlapped=0x0) returned 1 [0063.423] FlushFileBuffers (hFile=0x2fc) returned 1 [0063.429] FlushFileBuffers (hFile=0x2f8) returned 1 [0063.441] CloseHandle (hObject=0x2fc) returned 1 [0063.446] CloseHandle (hObject=0x2f8) returned 1 [0063.448] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 1 [0063.449] SetEvent (hEvent=0x284) returned 1 [0063.449] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0063.449] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=88533) returned 1 [0063.449] CloseHandle (hObject=0x2f8) returned 1 [0063.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 0x80 [0063.449] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 0x80 [0063.450] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.450] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0063.450] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.450] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.450] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0063.450] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x159d5, lpOverlapped=0x0) returned 1 [0063.453] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x159e0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x159e0, lpOverlapped=0x0) returned 1 [0063.455] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0063.455] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.455] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.456] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x159d5, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x159d5, lpOverlapped=0x0) returned 1 [0063.456] FlushFileBuffers (hFile=0x2f8) returned 1 [0063.524] FlushFileBuffers (hFile=0x2fc) returned 1 [0063.548] CloseHandle (hObject=0x2f8) returned 1 [0063.551] CloseHandle (hObject=0x2fc) returned 1 [0063.553] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 1 [0063.555] SetEvent (hEvent=0x284) returned 1 [0063.555] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0063.555] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=39050) returned 1 [0063.555] CloseHandle (hObject=0x2fc) returned 1 [0063.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 0x80 [0063.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 0x80 [0063.555] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.555] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0063.556] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.556] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.556] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0063.557] ReadFile (in: hFile=0x2fc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x988a, lpOverlapped=0x0) returned 1 [0063.559] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x9890, lpOverlapped=0x0) returned 1 [0063.561] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0063.561] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.561] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.561] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x988a, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x988a, lpOverlapped=0x0) returned 1 [0063.561] FlushFileBuffers (hFile=0x2fc) returned 1 [0063.808] FlushFileBuffers (hFile=0x2f8) returned 1 [0063.812] CloseHandle (hObject=0x2fc) returned 1 [0063.813] CloseHandle (hObject=0x2f8) returned 1 [0063.818] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 1 [0063.820] SetEvent (hEvent=0x284) returned 1 [0063.820] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0063.820] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=894) returned 1 [0063.820] CloseHandle (hObject=0x2f8) returned 1 [0063.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 0x80 [0063.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 0x80 [0063.820] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.820] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8 [0063.820] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.820] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.820] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc [0063.821] ReadFile (in: hFile=0x2f8, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x37e, lpOverlapped=0x0) returned 1 [0063.823] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x380, lpOverlapped=0x0) returned 1 [0063.824] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0063.824] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.824] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.824] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x37e, lpOverlapped=0x0) returned 1 [0063.824] FlushFileBuffers (hFile=0x2f8) returned 1 [0063.826] FlushFileBuffers (hFile=0x2fc) returned 1 [0063.827] CloseHandle (hObject=0x2f8) returned 1 [0063.828] CloseHandle (hObject=0x2fc) returned 1 [0063.829] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 1 [0063.830] SetEvent (hEvent=0x284) returned 1 [0063.830] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0063.830] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=894) returned 1 [0063.830] CloseHandle (hObject=0x2fc) returned 1 [0063.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 0x80 [0063.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 0x80 [0063.830] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0063.830] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc [0063.830] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.830] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0063.830] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8 [0063.831] ReadFile (in: hFile=0x2fc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x37e, lpOverlapped=0x0) returned 1 [0063.832] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x380, lpOverlapped=0x0) returned 1 [0063.833] WriteFile (in: hFile=0x2f8, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0063.833] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.833] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0063.833] WriteFile (in: hFile=0x2fc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x37e, lpOverlapped=0x0) returned 1 [0063.834] FlushFileBuffers (hFile=0x2fc) returned 1 [0064.067] FlushFileBuffers (hFile=0x2f8) returned 1 [0064.068] CloseHandle (hObject=0x2fc) returned 1 [0064.069] CloseHandle (hObject=0x2f8) returned 1 [0064.069] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 1 [0064.243] SetEvent (hEvent=0x284) returned 1 [0064.243] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0064.243] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=894) returned 1 [0064.243] CloseHandle (hObject=0x350) returned 1 [0064.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 0x80 [0064.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 0x80 [0064.243] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.244] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0064.244] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0064.244] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0064.244] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x358 [0064.244] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x37e, lpOverlapped=0x0) returned 1 [0064.246] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x380, lpOverlapped=0x0) returned 1 [0064.247] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0064.247] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0064.247] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0064.247] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x37e, lpOverlapped=0x0) returned 1 [0064.247] FlushFileBuffers (hFile=0x350) returned 1 [0064.575] FlushFileBuffers (hFile=0x358) returned 1 [0064.576] CloseHandle (hObject=0x350) returned 1 [0064.576] CloseHandle (hObject=0x358) returned 1 [0064.577] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 1 [0064.578] SetEvent (hEvent=0x284) returned 1 [0064.578] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0064.666] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=1150) returned 1 [0064.666] CloseHandle (hObject=0x358) returned 1 [0064.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 0x80 [0064.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 0x80 [0064.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.667] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0064.667] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0064.667] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0064.667] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350 [0064.667] ReadFile (in: hFile=0x358, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x47e, lpOverlapped=0x0) returned 1 [0064.669] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x480, lpOverlapped=0x0) returned 1 [0064.670] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0064.670] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0064.670] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0064.670] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x47e, lpOverlapped=0x0) returned 1 [0064.670] FlushFileBuffers (hFile=0x358) returned 1 [0064.673] FlushFileBuffers (hFile=0x350) returned 1 [0064.674] CloseHandle (hObject=0x358) returned 1 [0064.674] CloseHandle (hObject=0x350) returned 1 [0064.675] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 1 [0064.676] SetEvent (hEvent=0x284) returned 1 [0064.676] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0064.676] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=1150) returned 1 [0064.676] CloseHandle (hObject=0x350) returned 1 [0064.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 0x80 [0064.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 0x80 [0064.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.676] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0064.677] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0064.677] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0064.677] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x358 [0064.677] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x47e, lpOverlapped=0x0) returned 1 [0064.679] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x480, lpOverlapped=0x0) returned 1 [0064.680] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0064.680] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0064.680] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0064.680] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x47e, lpOverlapped=0x0) returned 1 [0064.680] FlushFileBuffers (hFile=0x350) returned 1 [0064.683] FlushFileBuffers (hFile=0x358) returned 1 [0064.684] CloseHandle (hObject=0x350) returned 1 [0064.684] CloseHandle (hObject=0x358) returned 1 [0064.685] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 1 [0064.686] SetEvent (hEvent=0x284) returned 1 [0064.686] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0064.687] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=10134) returned 1 [0064.687] CloseHandle (hObject=0x358) returned 1 [0064.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 0x80 [0064.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 0x80 [0064.687] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.687] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0064.687] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0064.687] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0064.687] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350 [0064.687] ReadFile (in: hFile=0x358, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x2796, lpOverlapped=0x0) returned 1 [0064.689] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x27a0, lpOverlapped=0x0) returned 1 [0064.690] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0064.690] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0064.690] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0064.690] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x2796, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x2796, lpOverlapped=0x0) returned 1 [0064.690] FlushFileBuffers (hFile=0x358) returned 1 [0064.692] FlushFileBuffers (hFile=0x350) returned 1 [0064.694] CloseHandle (hObject=0x358) returned 1 [0064.695] CloseHandle (hObject=0x350) returned 1 [0064.696] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 1 [0064.697] SetEvent (hEvent=0x284) returned 1 [0064.697] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0064.698] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=3628) returned 1 [0064.698] CloseHandle (hObject=0x350) returned 1 [0064.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 0x80 [0064.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 0x80 [0064.698] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\header.bmp.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0064.698] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0064.698] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0064.698] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0064.698] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\header.bmp.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x358 [0064.698] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0xe2c, lpOverlapped=0x0) returned 1 [0064.700] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xe30, lpOverlapped=0x0) returned 1 [0064.701] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0064.701] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0064.701] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0064.701] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xe2c, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0xe2c, lpOverlapped=0x0) returned 1 [0064.701] FlushFileBuffers (hFile=0x350) returned 1 [0065.095] FlushFileBuffers (hFile=0x358) returned 1 [0065.102] CloseHandle (hObject=0x350) returned 1 [0065.103] CloseHandle (hObject=0x358) returned 1 [0065.104] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 1 [0065.105] SetEvent (hEvent=0x284) returned 1 [0065.105] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0065.107] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=1901056) returned 1 [0065.107] CloseHandle (hObject=0x358) returned 1 [0065.107] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi")) returned 0x80 [0065.107] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 1 [0065.400] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0065.401] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0065.401] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0065.401] ReadFile (in: hFile=0x358, lpBuffer=0x581e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x581e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0065.407] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x9ab55, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0065.407] ReadFile (in: hFile=0x358, lpBuffer=0x585e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x585e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0065.410] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x190200, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0065.410] ReadFile (in: hFile=0x358, lpBuffer=0x589e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x589e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0065.422] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb0 | out: lpNewFilePointer=0x0) returned 1 [0065.423] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x54efba8, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba8*=0xc0112, lpOverlapped=0x0) returned 1 [0065.667] SetEndOfFile (hFile=0x358) returned 1 [0065.668] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x190200, lpNewFilePointer=0x0, dwMoveMethod=0x54efa48 | out: lpNewFilePointer=0x0) returned 1 [0065.668] WriteFile (in: hFile=0x358, lpBuffer=0x58de14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x54efa54, lpOverlapped=0x0 | out: lpBuffer=0x58de14a*, lpNumberOfBytesWritten=0x54efa54*=0x40000, lpOverlapped=0x0) returned 1 [0065.670] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x9ab55, lpNewFilePointer=0x0, dwMoveMethod=0x54efa48 | out: lpNewFilePointer=0x0) returned 1 [0065.670] WriteFile (in: hFile=0x358, lpBuffer=0x58de14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x54efa54, lpOverlapped=0x0 | out: lpBuffer=0x58de14a*, lpNumberOfBytesWritten=0x54efa54*=0x40000, lpOverlapped=0x0) returned 1 [0065.672] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa48 | out: lpNewFilePointer=0x0) returned 1 [0065.672] WriteFile (in: hFile=0x358, lpBuffer=0x58de14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x54efa54, lpOverlapped=0x0 | out: lpBuffer=0x58de14a*, lpNumberOfBytesWritten=0x54efa54*=0x40000, lpOverlapped=0x0) returned 1 [0065.673] FlushFileBuffers (hFile=0x358) returned 1 [0066.802] CloseHandle (hObject=0x358) returned 1 [0067.077] SetEvent (hEvent=0x284) returned 1 [0067.078] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0067.078] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=43131591) returned 1 [0067.078] CloseHandle (hObject=0x358) returned 1 [0067.078] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz")) returned 0x20 [0067.078] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 1 [0067.079] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\netfx_Extended.mzz.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0067.079] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0067.079] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0067.079] ReadFile (in: hFile=0x358, lpBuffer=0x581e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x581e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0067.084] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0xdb60ed, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0067.084] ReadFile (in: hFile=0x358, lpBuffer=0x585e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x585e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0067.087] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x28e22c7, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0067.087] ReadFile (in: hFile=0x358, lpBuffer=0x589e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x589e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0067.104] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb0 | out: lpNewFilePointer=0x0) returned 1 [0067.104] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x54efba8, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba8*=0xc0112, lpOverlapped=0x0) returned 1 [0067.420] SetEndOfFile (hFile=0x358) returned 1 [0067.420] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x28e22c7, lpNewFilePointer=0x0, dwMoveMethod=0x54efa48 | out: lpNewFilePointer=0x0) returned 1 [0067.420] WriteFile (in: hFile=0x358, lpBuffer=0x58de14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x54efa54, lpOverlapped=0x0 | out: lpBuffer=0x58de14a*, lpNumberOfBytesWritten=0x54efa54*=0x40000, lpOverlapped=0x0) returned 1 [0067.422] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0xdb60ed, lpNewFilePointer=0x0, dwMoveMethod=0x54efa48 | out: lpNewFilePointer=0x0) returned 1 [0067.422] WriteFile (in: hFile=0x358, lpBuffer=0x58de14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x54efa54, lpOverlapped=0x0 | out: lpBuffer=0x58de14a*, lpNumberOfBytesWritten=0x54efa54*=0x40000, lpOverlapped=0x0) returned 1 [0067.423] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa48 | out: lpNewFilePointer=0x0) returned 1 [0067.423] WriteFile (in: hFile=0x358, lpBuffer=0x58de14a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x54efa54, lpOverlapped=0x0 | out: lpBuffer=0x58de14a*, lpNumberOfBytesWritten=0x54efa54*=0x40000, lpOverlapped=0x0) returned 1 [0067.424] FlushFileBuffers (hFile=0x358) returned 1 [0067.530] CloseHandle (hObject=0x358) returned 1 [0068.545] SetEvent (hEvent=0x284) returned 1 [0068.545] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0068.545] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=184832) returned 1 [0068.545] CloseHandle (hObject=0x358) returned 1 [0068.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 0x80 [0068.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 0x80 [0068.546] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0068.546] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0068.546] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0068.546] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0068.546] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350 [0068.546] ReadFile (in: hFile=0x358, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x2d200, lpOverlapped=0x0) returned 1 [0068.551] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x2d210, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x2d210, lpOverlapped=0x0) returned 1 [0068.558] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0068.558] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0068.558] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0068.558] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x2d200, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x2d200, lpOverlapped=0x0) returned 1 [0068.559] FlushFileBuffers (hFile=0x358) returned 1 [0068.658] FlushFileBuffers (hFile=0x350) returned 1 [0068.661] CloseHandle (hObject=0x358) returned 1 [0068.666] CloseHandle (hObject=0x350) returned 1 [0068.670] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 1 [0068.672] SetEvent (hEvent=0x284) returned 1 [0068.672] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0068.672] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=78152) returned 1 [0068.672] CloseHandle (hObject=0x350) returned 1 [0068.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 0x80 [0068.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 0x80 [0068.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\setup.exe.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0068.672] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0068.672] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0068.673] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0068.673] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\setup.exe.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x358 [0068.673] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x13148, lpOverlapped=0x0) returned 1 [0068.676] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x13150, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x13150, lpOverlapped=0x0) returned 1 [0068.678] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0068.678] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0068.678] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0068.678] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x13148, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x13148, lpOverlapped=0x0) returned 1 [0068.678] FlushFileBuffers (hFile=0x350) returned 1 [0069.019] FlushFileBuffers (hFile=0x358) returned 1 [0069.022] CloseHandle (hObject=0x350) returned 1 [0069.025] CloseHandle (hObject=0x358) returned 1 [0069.028] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 1 [0069.030] SetEvent (hEvent=0x284) returned 1 [0069.030] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0069.030] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=295248) returned 1 [0069.030] CloseHandle (hObject=0x358) returned 1 [0069.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 0x80 [0069.030] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 0x80 [0069.032] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0069.032] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0069.032] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0069.032] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0069.033] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350 [0069.033] ReadFile (in: hFile=0x358, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x48150, lpOverlapped=0x0) returned 1 [0069.039] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x48160, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x48160, lpOverlapped=0x0) returned 1 [0069.044] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0069.045] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0069.045] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0069.045] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x48150, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x48150, lpOverlapped=0x0) returned 1 [0069.046] FlushFileBuffers (hFile=0x358) returned 1 [0069.162] FlushFileBuffers (hFile=0x350) returned 1 [0069.164] CloseHandle (hObject=0x358) returned 1 [0069.169] CloseHandle (hObject=0x350) returned 1 [0069.175] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 1 [0069.178] SetEvent (hEvent=0x284) returned 1 [0069.178] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0069.178] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=96088) returned 1 [0069.178] CloseHandle (hObject=0x350) returned 1 [0069.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 0x80 [0069.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 0x80 [0069.178] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0069.178] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0069.179] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0069.179] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0069.179] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x358 [0069.179] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x17758, lpOverlapped=0x0) returned 1 [0069.182] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x17760, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x17760, lpOverlapped=0x0) returned 1 [0069.184] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0069.184] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0069.184] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0069.184] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x17758, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x17758, lpOverlapped=0x0) returned 1 [0069.185] FlushFileBuffers (hFile=0x350) returned 1 [0069.464] FlushFileBuffers (hFile=0x358) returned 1 [0069.466] CloseHandle (hObject=0x350) returned 1 [0069.468] CloseHandle (hObject=0x358) returned 1 [0069.471] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 1 [0069.473] SetEvent (hEvent=0x284) returned 1 [0069.473] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0069.473] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=41080) returned 1 [0069.473] CloseHandle (hObject=0x358) returned 1 [0069.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 0x80 [0069.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 0x80 [0069.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0069.473] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0069.473] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0069.473] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0069.473] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350 [0069.474] ReadFile (in: hFile=0x358, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0xa078, lpOverlapped=0x0) returned 1 [0069.476] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xa080, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xa080, lpOverlapped=0x0) returned 1 [0069.478] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0069.478] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0069.478] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0069.478] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xa078, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0xa078, lpOverlapped=0x0) returned 1 [0069.478] FlushFileBuffers (hFile=0x358) returned 1 [0069.689] FlushFileBuffers (hFile=0x350) returned 1 [0069.693] CloseHandle (hObject=0x358) returned 1 [0069.696] CloseHandle (hObject=0x350) returned 1 [0069.704] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 1 [0069.750] SetEvent (hEvent=0x284) returned 1 [0069.750] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0069.751] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=14084) returned 1 [0069.751] CloseHandle (hObject=0x350) returned 1 [0069.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 0x80 [0069.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 0x80 [0069.751] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\strings.xml.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0069.751] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0069.751] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0069.751] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0069.751] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\strings.xml.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x358 [0069.752] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x3704, lpOverlapped=0x0) returned 1 [0069.754] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3710, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x3710, lpOverlapped=0x0) returned 1 [0069.755] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0069.755] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0069.756] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0069.756] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3704, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x3704, lpOverlapped=0x0) returned 1 [0069.756] FlushFileBuffers (hFile=0x350) returned 1 [0069.862] FlushFileBuffers (hFile=0x358) returned 1 [0069.863] CloseHandle (hObject=0x350) returned 1 [0069.864] CloseHandle (hObject=0x358) returned 1 [0069.865] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 1 [0069.866] SetEvent (hEvent=0x284) returned 1 [0069.867] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0069.867] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=104072) returned 1 [0069.867] CloseHandle (hObject=0x358) returned 1 [0069.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 0x80 [0069.867] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 0x80 [0069.868] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0069.868] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0069.868] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0069.868] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0069.868] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350 [0069.868] ReadFile (in: hFile=0x358, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x19688, lpOverlapped=0x0) returned 1 [0069.871] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x19690, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x19690, lpOverlapped=0x0) returned 1 [0069.873] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0069.874] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0069.874] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0069.874] WriteFile (in: hFile=0x358, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x19688, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x19688, lpOverlapped=0x0) returned 1 [0069.874] FlushFileBuffers (hFile=0x358) returned 1 [0070.258] FlushFileBuffers (hFile=0x350) returned 1 [0070.259] CloseHandle (hObject=0x358) returned 1 [0070.262] CloseHandle (hObject=0x350) returned 1 [0070.264] DeleteFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 1 [0070.266] SetEvent (hEvent=0x284) returned 1 [0070.266] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0070.266] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=2192672) returned 1 [0070.266] CloseHandle (hObject=0x350) returned 1 [0070.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu")) returned 0x80 [0070.266] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 1 [0070.267] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0070.267] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0070.267] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0070.267] ReadFile (in: hFile=0x350, lpBuffer=0x581e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x581e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0070.272] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0xb270a, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0070.272] ReadFile (in: hFile=0x350, lpBuffer=0x585e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x585e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0070.275] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1d7520, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0070.275] ReadFile (in: hFile=0x350, lpBuffer=0x589e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x589e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0070.296] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb0 | out: lpNewFilePointer=0x0) returned 1 [0070.296] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x54efba8, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba8*=0xc0132, lpOverlapped=0x0) returned 1 [0070.480] SetEndOfFile (hFile=0x350) returned 1 [0070.480] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1d7520, lpNewFilePointer=0x0, dwMoveMethod=0x54efa48 | out: lpNewFilePointer=0x0) returned 1 [0070.480] WriteFile (in: hFile=0x350, lpBuffer=0x58de16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x54efa54, lpOverlapped=0x0 | out: lpBuffer=0x58de16a*, lpNumberOfBytesWritten=0x54efa54*=0x40000, lpOverlapped=0x0) returned 1 [0070.482] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0xb270a, lpNewFilePointer=0x0, dwMoveMethod=0x54efa48 | out: lpNewFilePointer=0x0) returned 1 [0070.482] WriteFile (in: hFile=0x350, lpBuffer=0x58de16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x54efa54, lpOverlapped=0x0 | out: lpBuffer=0x58de16a*, lpNumberOfBytesWritten=0x54efa54*=0x40000, lpOverlapped=0x0) returned 1 [0070.485] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa48 | out: lpNewFilePointer=0x0) returned 1 [0070.485] WriteFile (in: hFile=0x350, lpBuffer=0x58de16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x54efa54, lpOverlapped=0x0 | out: lpBuffer=0x58de16a*, lpNumberOfBytesWritten=0x54efa54*=0x40000, lpOverlapped=0x0) returned 1 [0070.487] FlushFileBuffers (hFile=0x350) returned 1 [0070.650] CloseHandle (hObject=0x350) returned 1 [0071.206] SetEvent (hEvent=0x284) returned 1 [0071.207] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0071.207] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=5091790) returned 1 [0071.207] CloseHandle (hObject=0x350) returned 1 [0071.207] GetFileAttributesW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu")) returned 0x80 [0071.207] MoveFileW (lpExistingFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), lpNewFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 1 [0071.208] CreateFileW (lpFileName="\\\\?\\C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0071.208] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0071.208] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0071.208] ReadFile (in: hFile=0x350, lpBuffer=0x581e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x581e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0071.212] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0071.212] ReadFile (in: hFile=0x350, lpBuffer=0x585e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x585e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0071.215] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0071.215] ReadFile (in: hFile=0x350, lpBuffer=0x589e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x589e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0071.228] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb0 | out: lpNewFilePointer=0x0) returned 1 [0071.228] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xc0132, lpNumberOfBytesWritten=0x54efba8, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba8*=0xc0132, lpOverlapped=0x0) returned 1 [0071.251] SetEndOfFile (hFile=0x350) returned 1 [0071.251] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x54efa48 | out: lpNewFilePointer=0x0) returned 1 [0071.251] WriteFile (in: hFile=0x350, lpBuffer=0x58de16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x54efa54, lpOverlapped=0x0 | out: lpBuffer=0x58de16a*, lpNumberOfBytesWritten=0x54efa54*=0x40000, lpOverlapped=0x0) returned 1 [0071.427] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x54efa48 | out: lpNewFilePointer=0x0) returned 1 [0071.427] WriteFile (in: hFile=0x350, lpBuffer=0x58de16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x54efa54, lpOverlapped=0x0 | out: lpBuffer=0x58de16a*, lpNumberOfBytesWritten=0x54efa54*=0x40000, lpOverlapped=0x0) returned 1 [0071.429] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa48 | out: lpNewFilePointer=0x0) returned 1 [0071.429] WriteFile (in: hFile=0x350, lpBuffer=0x58de16a*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x54efa54, lpOverlapped=0x0 | out: lpBuffer=0x58de16a*, lpNumberOfBytesWritten=0x54efa54*=0x40000, lpOverlapped=0x0) returned 1 [0071.430] FlushFileBuffers (hFile=0x350) returned 1 [0071.437] CloseHandle (hObject=0x350) returned 1 [0072.424] SetEvent (hEvent=0x284) returned 1 [0072.425] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.425] SetEvent (hEvent=0x284) returned 1 [0072.426] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.426] SetEvent (hEvent=0x284) returned 1 [0072.426] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.427] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=0) returned 1 [0072.427] CloseHandle (hObject=0x2bc) returned 1 [0072.427] SetEvent (hEvent=0x284) returned 1 [0072.428] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0072.428] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=0) returned 1 [0072.428] CloseHandle (hObject=0x318) returned 1 [0072.428] SetEvent (hEvent=0x284) returned 1 [0072.429] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0072.429] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=77664) returned 1 [0072.429] CloseHandle (hObject=0x318) returned 1 [0072.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20 [0072.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20 [0072.429] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.429] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.430] SetEvent (hEvent=0x284) returned 1 [0072.430] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0072.432] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=95648) returned 1 [0072.432] CloseHandle (hObject=0x318) returned 1 [0072.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20 [0072.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20 [0072.432] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\bootspaces.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.432] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.432] SetEvent (hEvent=0x284) returned 1 [0072.432] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0072.434] GetFileSizeEx (in: hFile=0x318, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=65536) returned 1 [0072.434] CloseHandle (hObject=0x318) returned 1 [0072.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0072.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26 [0072.434] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\bootstat.dat.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.434] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318 [0072.434] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0072.434] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0072.434] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\bootstat.dat.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2bc [0072.435] ReadFile (in: hFile=0x318, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x10000, lpOverlapped=0x0) returned 1 [0072.439] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x10010, lpOverlapped=0x0) returned 1 [0072.441] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0072.441] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0072.441] SetFilePointerEx (in: hFile=0x318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0072.441] WriteFile (in: hFile=0x318, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x10000, lpOverlapped=0x0) returned 1 [0072.442] FlushFileBuffers (hFile=0x318) returned 1 [0072.449] FlushFileBuffers (hFile=0x2bc) returned 1 [0072.450] CloseHandle (hObject=0x318) returned 1 [0072.452] CloseHandle (hObject=0x2bc) returned 1 [0072.454] DeleteFileW (lpFileName="\\\\?\\C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 1 [0072.466] SetEvent (hEvent=0x284) returned 1 [0072.466] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.467] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=99744) returned 1 [0072.467] CloseHandle (hObject=0x2bc) returned 1 [0072.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20 [0072.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20 [0072.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\bootvhd.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.467] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.467] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.467] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=76632) returned 1 [0072.467] CloseHandle (hObject=0x2bc) returned 1 [0072.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0072.467] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20 [0072.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.468] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.468] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.468] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45472) returned 1 [0072.468] CloseHandle (hObject=0x2bc) returned 1 [0072.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20 [0072.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20 [0072.468] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.468] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.468] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.469] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=75616) returned 1 [0072.469] CloseHandle (hObject=0x2bc) returned 1 [0072.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0072.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20 [0072.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.469] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.469] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.469] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45472) returned 1 [0072.469] CloseHandle (hObject=0x2bc) returned 1 [0072.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20 [0072.469] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20 [0072.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.470] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.470] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.470] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=79200) returned 1 [0072.470] CloseHandle (hObject=0x2bc) returned 1 [0072.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0072.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20 [0072.470] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.471] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.471] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.471] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45984) returned 1 [0072.471] CloseHandle (hObject=0x2bc) returned 1 [0072.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20 [0072.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20 [0072.471] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\de-de\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.471] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.472] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.472] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=80224) returned 1 [0072.472] CloseHandle (hObject=0x2bc) returned 1 [0072.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0072.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20 [0072.472] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.472] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.472] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.472] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=46496) returned 1 [0072.472] CloseHandle (hObject=0x2bc) returned 1 [0072.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20 [0072.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20 [0072.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.473] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.473] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.473] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=74072) returned 1 [0072.473] CloseHandle (hObject=0x2bc) returned 1 [0072.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20 [0072.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20 [0072.473] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.473] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.474] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.474] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=74144) returned 1 [0072.474] CloseHandle (hObject=0x2bc) returned 1 [0072.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0072.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20 [0072.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.474] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.474] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.474] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=44960) returned 1 [0072.474] CloseHandle (hObject=0x2bc) returned 1 [0072.474] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0072.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20 [0072.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.475] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.475] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.475] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=77664) returned 1 [0072.475] CloseHandle (hObject=0x2bc) returned 1 [0072.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0072.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui")) returned 0x20 [0072.475] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.475] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.476] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.476] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45984) returned 1 [0072.476] CloseHandle (hObject=0x2bc) returned 1 [0072.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui")) returned 0x20 [0072.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui")) returned 0x20 [0072.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\es-es\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.476] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.476] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.476] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=77664) returned 1 [0072.476] CloseHandle (hObject=0x2bc) returned 1 [0072.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui")) returned 0x20 [0072.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui")) returned 0x20 [0072.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.477] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.477] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.477] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=75104) returned 1 [0072.477] CloseHandle (hObject=0x2bc) returned 1 [0072.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui")) returned 0x20 [0072.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui")) returned 0x20 [0072.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.477] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.477] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.478] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=76640) returned 1 [0072.478] CloseHandle (hObject=0x2bc) returned 1 [0072.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0072.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui")) returned 0x20 [0072.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.478] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.478] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.478] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45472) returned 1 [0072.479] CloseHandle (hObject=0x2bc) returned 1 [0072.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui")) returned 0x20 [0072.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui")) returned 0x20 [0072.479] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.479] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.479] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.484] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=3695719) returned 1 [0072.484] CloseHandle (hObject=0x2bc) returned 1 [0072.484] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0x20 [0072.484] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0 [0072.484] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf")) returned 0 [0072.484] SetEvent (hEvent=0x284) returned 1 [0072.484] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.486] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=3878410) returned 1 [0072.486] CloseHandle (hObject=0x2bc) returned 1 [0072.498] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0x20 [0072.499] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0 [0072.499] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf")) returned 0 [0072.499] SetEvent (hEvent=0x284) returned 1 [0072.499] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.501] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=1985867) returned 1 [0072.501] CloseHandle (hObject=0x2bc) returned 1 [0072.501] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20 [0072.501] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0 [0072.502] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0 [0072.502] SetEvent (hEvent=0x284) returned 1 [0072.502] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0072.504] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=2373000) returned 1 [0072.504] CloseHandle (hObject=0x2bc) returned 1 [0072.504] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0x20 [0072.504] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0 [0072.504] MoveFileW (lpExistingFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame"), lpNewFileName="\\\\?\\C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf")) returned 0 [0072.504] SetEvent (hEvent=0x284) returned 1 [0072.504] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0072.506] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=174959) returned 1 [0072.506] CloseHandle (hObject=0x308) returned 1 [0072.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0x20 [0072.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf")) returned 0x20 [0072.506] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.506] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.506] SetEvent (hEvent=0x284) returned 1 [0072.506] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0072.508] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=177414) returned 1 [0072.508] CloseHandle (hObject=0x308) returned 1 [0072.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20 [0072.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20 [0072.508] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.508] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.508] SetEvent (hEvent=0x284) returned 1 [0072.508] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0072.639] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=143754) returned 1 [0072.639] CloseHandle (hObject=0x314) returned 1 [0072.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20 [0072.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf")) returned 0x20 [0072.639] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.640] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.641] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0072.642] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=154427) returned 1 [0072.642] CloseHandle (hObject=0x314) returned 1 [0072.642] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20 [0072.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20 [0072.643] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.643] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.643] SetEvent (hEvent=0x284) returned 1 [0072.643] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0072.644] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=156245) returned 1 [0072.644] CloseHandle (hObject=0x314) returned 1 [0072.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20 [0072.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20 [0072.644] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.644] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.645] SetEvent (hEvent=0x284) returned 1 [0072.645] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.646] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=44859) returned 1 [0072.646] CloseHandle (hObject=0x35c) returned 1 [0072.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20 [0072.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20 [0072.647] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.648] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.649] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.649] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=79200) returned 1 [0072.649] CloseHandle (hObject=0x35c) returned 1 [0072.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20 [0072.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20 [0072.649] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.649] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.649] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.650] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=79192) returned 1 [0072.650] CloseHandle (hObject=0x35c) returned 1 [0072.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0072.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20 [0072.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.650] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.650] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.650] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45984) returned 1 [0072.650] CloseHandle (hObject=0x35c) returned 1 [0072.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui")) returned 0x20 [0072.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui")) returned 0x20 [0072.650] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.651] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.651] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.651] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=76640) returned 1 [0072.651] CloseHandle (hObject=0x35c) returned 1 [0072.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui")) returned 0x20 [0072.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui")) returned 0x20 [0072.651] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.651] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.651] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.652] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=78688) returned 1 [0072.652] CloseHandle (hObject=0x35c) returned 1 [0072.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0072.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui")) returned 0x20 [0072.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.652] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.652] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.652] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45976) returned 1 [0072.652] CloseHandle (hObject=0x35c) returned 1 [0072.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui")) returned 0x20 [0072.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui")) returned 0x20 [0072.652] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.652] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.653] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.653] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=77144) returned 1 [0072.653] CloseHandle (hObject=0x35c) returned 1 [0072.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0072.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui")) returned 0x20 [0072.653] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.653] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.653] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.653] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45472) returned 1 [0072.654] CloseHandle (hObject=0x35c) returned 1 [0072.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui")) returned 0x20 [0072.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui")) returned 0x20 [0072.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\it-it\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.654] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.654] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.654] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=67424) returned 1 [0072.654] CloseHandle (hObject=0x35c) returned 1 [0072.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0072.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui")) returned 0x20 [0072.654] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.654] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.655] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.655] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=42904) returned 1 [0072.655] CloseHandle (hObject=0x35c) returned 1 [0072.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui")) returned 0x20 [0072.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui")) returned 0x20 [0072.655] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.655] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.655] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.656] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=66912) returned 1 [0072.656] CloseHandle (hObject=0x35c) returned 1 [0072.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0072.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui")) returned 0x20 [0072.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.656] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.656] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.656] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=42912) returned 1 [0072.656] CloseHandle (hObject=0x35c) returned 1 [0072.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui")) returned 0x20 [0072.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui")) returned 0x20 [0072.656] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.656] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.657] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.657] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=75616) returned 1 [0072.657] CloseHandle (hObject=0x35c) returned 1 [0072.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui")) returned 0x20 [0072.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui")) returned 0x20 [0072.657] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.657] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.657] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.658] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=75608) returned 1 [0072.658] CloseHandle (hObject=0x35c) returned 1 [0072.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui")) returned 0x20 [0072.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui")) returned 0x20 [0072.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.658] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.658] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.658] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=811936) returned 1 [0072.658] CloseHandle (hObject=0x35c) returned 1 [0072.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0072.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe")) returned 0x20 [0072.658] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\memtest.exe.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.658] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.659] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.659] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=75616) returned 1 [0072.659] CloseHandle (hObject=0x35c) returned 1 [0072.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0072.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui")) returned 0x20 [0072.667] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.667] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.668] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.668] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45472) returned 1 [0072.668] CloseHandle (hObject=0x35c) returned 1 [0072.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui")) returned 0x20 [0072.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui")) returned 0x20 [0072.668] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.668] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.668] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.669] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=78176) returned 1 [0072.669] CloseHandle (hObject=0x35c) returned 1 [0072.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0072.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui")) returned 0x20 [0072.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.669] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.669] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.669] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45472) returned 1 [0072.669] CloseHandle (hObject=0x35c) returned 1 [0072.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui")) returned 0x20 [0072.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui")) returned 0x20 [0072.669] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.669] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.670] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.670] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=77656) returned 1 [0072.670] CloseHandle (hObject=0x35c) returned 1 [0072.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0072.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui")) returned 0x20 [0072.670] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.670] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.670] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.670] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45984) returned 1 [0072.670] CloseHandle (hObject=0x35c) returned 1 [0072.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui")) returned 0x20 [0072.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui")) returned 0x20 [0072.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.671] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.671] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.671] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=76640) returned 1 [0072.671] CloseHandle (hObject=0x35c) returned 1 [0072.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0072.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui")) returned 0x20 [0072.671] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.671] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.672] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.672] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45472) returned 1 [0072.672] CloseHandle (hObject=0x35c) returned 1 [0072.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui")) returned 0x20 [0072.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui")) returned 0x20 [0072.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.672] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.672] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.672] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=76640) returned 1 [0072.672] CloseHandle (hObject=0x35c) returned 1 [0072.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0072.672] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui")) returned 0x20 [0072.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.673] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.673] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.673] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45984) returned 1 [0072.673] CloseHandle (hObject=0x35c) returned 1 [0072.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui")) returned 0x20 [0072.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui")) returned 0x20 [0072.673] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.673] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.673] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.674] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=74080) returned 1 [0072.674] CloseHandle (hObject=0x35c) returned 1 [0072.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui")) returned 0x20 [0072.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui")) returned 0x20 [0072.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.674] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.674] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.674] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=54168) returned 1 [0072.674] CloseHandle (hObject=0x35c) returned 1 [0072.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui")) returned 0x20 [0072.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui")) returned 0x20 [0072.674] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.675] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.675] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.675] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=92576) returned 1 [0072.675] CloseHandle (hObject=0x35c) returned 1 [0072.675] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll")) returned 0x20 [0072.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll")) returned 0x20 [0072.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\resources\\bootres.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.676] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\bootres.dll" (normalized: "c:\\boot\\resources\\bootres.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.676] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.676] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=12192) returned 1 [0072.676] CloseHandle (hObject=0x35c) returned 1 [0072.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui")) returned 0x20 [0072.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui")) returned 0x20 [0072.676] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.676] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.677] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.677] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=76128) returned 1 [0072.677] CloseHandle (hObject=0x35c) returned 1 [0072.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui")) returned 0x20 [0072.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui")) returned 0x20 [0072.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.677] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.677] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.677] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=77152) returned 1 [0072.677] CloseHandle (hObject=0x35c) returned 1 [0072.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0072.677] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui")) returned 0x20 [0072.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.678] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.678] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.678] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=44960) returned 1 [0072.678] CloseHandle (hObject=0x35c) returned 1 [0072.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui")) returned 0x20 [0072.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui")) returned 0x20 [0072.678] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.678] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.678] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.679] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=77144) returned 1 [0072.679] CloseHandle (hObject=0x35c) returned 1 [0072.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui")) returned 0x20 [0072.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui")) returned 0x20 [0072.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.679] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.679] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.679] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=76640) returned 1 [0072.679] CloseHandle (hObject=0x35c) returned 1 [0072.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui")) returned 0x20 [0072.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui")) returned 0x20 [0072.679] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.679] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.680] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.680] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=77152) returned 1 [0072.680] CloseHandle (hObject=0x35c) returned 1 [0072.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui")) returned 0x20 [0072.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui")) returned 0x20 [0072.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.680] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.680] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.680] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=44888) returned 1 [0072.680] CloseHandle (hObject=0x35c) returned 1 [0072.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui")) returned 0x20 [0072.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui")) returned 0x20 [0072.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.681] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.681] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.681] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=77152) returned 1 [0072.681] CloseHandle (hObject=0x35c) returned 1 [0072.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui")) returned 0x20 [0072.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui")) returned 0x20 [0072.681] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.681] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.682] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.682] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=76128) returned 1 [0072.682] CloseHandle (hObject=0x35c) returned 1 [0072.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0072.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui")) returned 0x20 [0072.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.682] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.682] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.682] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=44952) returned 1 [0072.682] CloseHandle (hObject=0x35c) returned 1 [0072.682] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui")) returned 0x20 [0072.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui")) returned 0x20 [0072.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.683] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.683] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.683] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=75096) returned 1 [0072.683] CloseHandle (hObject=0x35c) returned 1 [0072.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0072.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui")) returned 0x20 [0072.683] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.683] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.683] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.684] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=45472) returned 1 [0072.684] CloseHandle (hObject=0x35c) returned 1 [0072.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui")) returned 0x20 [0072.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui")) returned 0x20 [0072.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.684] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.684] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c [0072.684] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=77152) returned 1 [0072.684] CloseHandle (hObject=0x35c) returned 1 [0072.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui")) returned 0x20 [0072.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui")) returned 0x20 [0072.684] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.685] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.685] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0072.696] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=4662) returned 1 [0072.696] CloseHandle (hObject=0x350) returned 1 [0072.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20 [0072.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20 [0072.696] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\updaterevokesipolicy.p7b.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.696] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.696] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0072.892] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=42400) returned 1 [0072.892] CloseHandle (hObject=0x308) returned 1 [0072.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui")) returned 0x20 [0072.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui")) returned 0x20 [0072.892] GetFileAttributesW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.892] CreateFileW (lpFileName="\\\\?\\C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0072.892] SetEvent (hEvent=0x284) returned 1 [0072.893] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0072.893] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=8192) returned 1 [0072.893] CloseHandle (hObject=0x308) returned 1 [0072.893] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27 [0072.893] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1 [0072.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x26 [0072.894] GetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\bootsect.bak.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0072.894] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0072.894] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0072.894] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0072.894] CreateFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\bootsect.bak.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x26, hTemplateFile=0x0) returned 0x2bc [0072.894] ReadFile (in: hFile=0x308, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x2000, lpOverlapped=0x0) returned 1 [0072.896] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x2010, lpOverlapped=0x0) returned 1 [0072.897] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0072.897] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0072.897] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0072.897] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x2000, lpOverlapped=0x0) returned 1 [0072.897] FlushFileBuffers (hFile=0x308) returned 1 [0073.383] FlushFileBuffers (hFile=0x2bc) returned 1 [0073.384] CloseHandle (hObject=0x308) returned 1 [0073.388] CloseHandle (hObject=0x2bc) returned 1 [0073.390] DeleteFileW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 1 [0073.391] SetFileAttributesW (lpFileName="\\\\?\\C:\\BOOTSECT.BAK.id[B4197730-2275].[checkcheck07@qq.com].Adame", dwFileAttributes=0x27) returned 1 [0073.391] SetEvent (hEvent=0x284) returned 1 [0073.391] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0073.392] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0073.392] CloseHandle (hObject=0x2bc) returned 1 [0073.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 0x20 [0073.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 0x20 [0073.393] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\hardwareevents.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0073.393] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0073.393] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0073.393] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0073.393] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\hardwareevents.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0073.393] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0073.399] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0073.401] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0073.401] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0073.401] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0073.401] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0073.402] FlushFileBuffers (hFile=0x2bc) returned 1 [0073.408] FlushFileBuffers (hFile=0x308) returned 1 [0073.417] CloseHandle (hObject=0x2bc) returned 1 [0073.419] CloseHandle (hObject=0x308) returned 1 [0073.423] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 1 [0073.425] SetEvent (hEvent=0x284) returned 1 [0073.425] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0073.426] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0073.426] CloseHandle (hObject=0x308) returned 1 [0073.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 0x20 [0073.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 0x20 [0073.426] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\internet explorer.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0073.426] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0073.426] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0073.426] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0073.426] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\internet explorer.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0073.431] ReadFile (in: hFile=0x308, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0073.435] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0073.437] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0073.438] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0073.438] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0073.438] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0073.438] FlushFileBuffers (hFile=0x308) returned 1 [0073.883] FlushFileBuffers (hFile=0x2bc) returned 1 [0073.884] CloseHandle (hObject=0x308) returned 1 [0073.886] CloseHandle (hObject=0x2bc) returned 1 [0073.888] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 1 [0073.890] SetEvent (hEvent=0x284) returned 1 [0073.890] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0073.890] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0073.890] CloseHandle (hObject=0x2bc) returned 1 [0073.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 0x20 [0073.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 0x20 [0073.890] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0073.890] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0073.891] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0073.891] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0073.891] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x308 [0073.891] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0073.893] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0073.895] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0073.895] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0073.896] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0073.896] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0073.896] FlushFileBuffers (hFile=0x2bc) returned 1 [0074.141] FlushFileBuffers (hFile=0x308) returned 1 [0074.142] CloseHandle (hObject=0x2bc) returned 1 [0074.144] CloseHandle (hObject=0x308) returned 1 [0074.146] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 1 [0074.147] SetEvent (hEvent=0x284) returned 1 [0074.148] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0074.148] GetFileSizeEx (in: hFile=0x308, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0074.148] CloseHandle (hObject=0x308) returned 1 [0074.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 0x20 [0074.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 0x20 [0074.148] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.148] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x308 [0074.148] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.148] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.148] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0074.149] ReadFile (in: hFile=0x308, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0074.151] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0074.153] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x142, lpOverlapped=0x0) returned 1 [0074.153] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0074.153] SetFilePointerEx (in: hFile=0x308, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0074.153] WriteFile (in: hFile=0x308, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0074.153] FlushFileBuffers (hFile=0x308) returned 1 [0074.449] FlushFileBuffers (hFile=0x2bc) returned 1 [0074.471] CloseHandle (hObject=0x308) returned 1 [0074.473] CloseHandle (hObject=0x2bc) returned 1 [0074.479] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 1 [0074.480] SetEvent (hEvent=0x284) returned 1 [0074.480] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0074.481] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0074.481] CloseHandle (hObject=0x2bc) returned 1 [0074.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 0x20 [0074.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 0x20 [0074.481] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.481] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0074.481] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.481] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.481] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x350 [0074.486] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0074.492] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0074.494] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x142, lpOverlapped=0x0) returned 1 [0074.494] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0074.494] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0074.494] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0074.495] FlushFileBuffers (hFile=0x2bc) returned 1 [0074.702] FlushFileBuffers (hFile=0x350) returned 1 [0074.703] CloseHandle (hObject=0x2bc) returned 1 [0074.705] CloseHandle (hObject=0x350) returned 1 [0074.708] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 1 [0074.876] SetEvent (hEvent=0x284) returned 1 [0074.876] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0074.876] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0074.876] CloseHandle (hObject=0x368) returned 1 [0074.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 0x20 [0074.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 0x20 [0074.876] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.876] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0074.876] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.877] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.877] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x31c [0074.877] ReadFile (in: hFile=0x368, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0074.883] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0074.885] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x142, lpOverlapped=0x0) returned 1 [0074.885] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0074.885] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0074.885] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0074.886] FlushFileBuffers (hFile=0x368) returned 1 [0074.896] FlushFileBuffers (hFile=0x31c) returned 1 [0074.905] CloseHandle (hObject=0x368) returned 1 [0074.906] CloseHandle (hObject=0x31c) returned 1 [0074.906] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 1 [0074.907] SetEvent (hEvent=0x284) returned 1 [0074.907] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0074.909] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0074.909] CloseHandle (hObject=0x31c) returned 1 [0074.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 0x20 [0074.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 0x20 [0074.921] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.921] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0074.922] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.922] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.922] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0074.922] ReadFile (in: hFile=0x31c, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0074.926] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0074.927] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x162, lpOverlapped=0x0) returned 1 [0074.928] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0074.928] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0074.928] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0074.928] FlushFileBuffers (hFile=0x31c) returned 1 [0074.941] FlushFileBuffers (hFile=0x368) returned 1 [0074.943] CloseHandle (hObject=0x31c) returned 1 [0074.943] CloseHandle (hObject=0x368) returned 1 [0074.944] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 1 [0074.945] SetEvent (hEvent=0x284) returned 1 [0074.945] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0074.945] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0074.945] CloseHandle (hObject=0x368) returned 1 [0074.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 0x20 [0074.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 0x20 [0074.945] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.946] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0074.946] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.946] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.946] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x31c [0074.947] ReadFile (in: hFile=0x368, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0074.954] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0074.956] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x142, lpOverlapped=0x0) returned 1 [0074.956] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0074.956] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0074.956] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0074.957] FlushFileBuffers (hFile=0x368) returned 1 [0074.976] FlushFileBuffers (hFile=0x31c) returned 1 [0074.980] CloseHandle (hObject=0x368) returned 1 [0074.980] CloseHandle (hObject=0x31c) returned 1 [0074.980] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 1 [0074.982] SetEvent (hEvent=0x284) returned 1 [0074.982] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0074.982] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0074.982] CloseHandle (hObject=0x31c) returned 1 [0074.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 0x20 [0074.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 0x20 [0074.982] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0074.982] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0074.982] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.982] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0074.983] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0074.983] ReadFile (in: hFile=0x31c, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0074.989] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0074.990] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x142, lpOverlapped=0x0) returned 1 [0074.991] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0074.991] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0074.991] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0074.991] FlushFileBuffers (hFile=0x31c) returned 1 [0075.882] FlushFileBuffers (hFile=0x368) returned 1 [0075.885] CloseHandle (hObject=0x31c) returned 1 [0075.886] CloseHandle (hObject=0x368) returned 1 [0075.886] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 1 [0075.887] SetEvent (hEvent=0x284) returned 1 [0075.887] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0075.888] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0075.888] CloseHandle (hObject=0x368) returned 1 [0075.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 0x20 [0075.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 0x20 [0075.888] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0075.888] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0075.888] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0075.888] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0075.888] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x31c [0075.888] ReadFile (in: hFile=0x368, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0075.892] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0075.901] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x142, lpOverlapped=0x0) returned 1 [0075.902] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0075.902] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0075.902] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0075.902] FlushFileBuffers (hFile=0x368) returned 1 [0075.908] FlushFileBuffers (hFile=0x31c) returned 1 [0075.916] CloseHandle (hObject=0x368) returned 1 [0075.916] CloseHandle (hObject=0x31c) returned 1 [0075.916] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 1 [0075.918] SetEvent (hEvent=0x284) returned 1 [0075.918] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0075.918] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0075.918] CloseHandle (hObject=0x31c) returned 1 [0075.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 0x20 [0075.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 0x20 [0075.918] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0075.919] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0075.919] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0075.919] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0075.919] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0075.919] ReadFile (in: hFile=0x31c, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0075.923] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0075.928] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x142, lpOverlapped=0x0) returned 1 [0075.929] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0075.929] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0075.929] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0075.929] FlushFileBuffers (hFile=0x31c) returned 1 [0075.935] FlushFileBuffers (hFile=0x368) returned 1 [0075.937] CloseHandle (hObject=0x31c) returned 1 [0075.937] CloseHandle (hObject=0x368) returned 1 [0075.937] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 1 [0075.939] SetEvent (hEvent=0x284) returned 1 [0075.939] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0075.939] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0075.939] CloseHandle (hObject=0x368) returned 1 [0075.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 0x20 [0075.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 0x20 [0075.939] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0075.940] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0075.940] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0075.940] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0075.940] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x300 [0075.948] ReadFile (in: hFile=0x368, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0075.952] WriteFile (in: hFile=0x300, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0075.953] WriteFile (in: hFile=0x300, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0075.954] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0075.954] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0075.954] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0075.954] FlushFileBuffers (hFile=0x368) returned 1 [0075.958] FlushFileBuffers (hFile=0x300) returned 1 [0075.959] CloseHandle (hObject=0x368) returned 1 [0075.959] CloseHandle (hObject=0x300) returned 1 [0075.959] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 1 [0075.961] SetEvent (hEvent=0x284) returned 1 [0075.961] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0075.961] GetFileSizeEx (in: hFile=0x300, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0075.961] CloseHandle (hObject=0x300) returned 1 [0075.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 0x20 [0075.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 0x20 [0075.961] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0075.961] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300 [0075.961] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0075.961] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0075.962] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x368 [0075.962] ReadFile (in: hFile=0x300, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0075.964] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0075.966] WriteFile (in: hFile=0x368, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0075.966] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0075.966] SetFilePointerEx (in: hFile=0x300, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0075.966] WriteFile (in: hFile=0x300, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0075.967] FlushFileBuffers (hFile=0x300) returned 1 [0075.969] FlushFileBuffers (hFile=0x368) returned 1 [0075.971] CloseHandle (hObject=0x300) returned 1 [0075.977] CloseHandle (hObject=0x368) returned 1 [0075.977] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 1 [0075.979] SetEvent (hEvent=0x284) returned 1 [0075.979] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0075.980] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0075.980] CloseHandle (hObject=0x368) returned 1 [0075.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 0x20 [0075.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 0x20 [0075.980] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.041] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0076.041] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.041] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.042] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0076.042] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0076.046] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0076.048] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x142, lpOverlapped=0x0) returned 1 [0076.048] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.048] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.048] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0076.048] FlushFileBuffers (hFile=0x350) returned 1 [0076.057] FlushFileBuffers (hFile=0x2bc) returned 1 [0076.060] CloseHandle (hObject=0x350) returned 1 [0076.060] CloseHandle (hObject=0x2bc) returned 1 [0076.060] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 1 [0076.061] SetEvent (hEvent=0x284) returned 1 [0076.062] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0076.062] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0076.062] CloseHandle (hObject=0x2bc) returned 1 [0076.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 0x20 [0076.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 0x20 [0076.062] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.062] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0076.062] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.062] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.062] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x350 [0076.064] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0076.071] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0076.073] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0076.074] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.074] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.074] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0076.074] FlushFileBuffers (hFile=0x2bc) returned 1 [0076.260] FlushFileBuffers (hFile=0x350) returned 1 [0076.263] CloseHandle (hObject=0x2bc) returned 1 [0076.263] CloseHandle (hObject=0x350) returned 1 [0076.263] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 1 [0076.265] SetEvent (hEvent=0x284) returned 1 [0076.265] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0076.265] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=1052672) returned 1 [0076.265] CloseHandle (hObject=0x350) returned 1 [0076.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 0x20 [0076.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 0x20 [0076.266] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.266] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0076.266] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.266] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.267] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0076.267] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x101000, lpOverlapped=0x0) returned 1 [0076.297] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x101010, lpOverlapped=0x0) returned 1 [0076.455] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x142, lpOverlapped=0x0) returned 1 [0076.455] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.455] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.455] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x101000, lpOverlapped=0x0) returned 1 [0076.476] FlushFileBuffers (hFile=0x350) returned 1 [0076.506] FlushFileBuffers (hFile=0x2bc) returned 1 [0076.510] CloseHandle (hObject=0x350) returned 1 [0076.510] CloseHandle (hObject=0x2bc) returned 1 [0076.511] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 1 [0076.522] SetEvent (hEvent=0x284) returned 1 [0076.522] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0076.523] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0076.523] CloseHandle (hObject=0x2bc) returned 1 [0076.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 0x20 [0076.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 0x20 [0076.523] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.523] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0076.523] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.523] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.523] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x350 [0076.523] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0076.527] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0076.528] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0076.529] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.529] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.529] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0076.529] FlushFileBuffers (hFile=0x2bc) returned 1 [0076.535] FlushFileBuffers (hFile=0x350) returned 1 [0076.541] CloseHandle (hObject=0x2bc) returned 1 [0076.541] CloseHandle (hObject=0x350) returned 1 [0076.541] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 1 [0076.543] SetEvent (hEvent=0x284) returned 1 [0076.543] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0076.543] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0076.543] CloseHandle (hObject=0x350) returned 1 [0076.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 0x20 [0076.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 0x20 [0076.543] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.543] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0076.543] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.543] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.543] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0076.544] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0076.555] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0076.558] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0076.558] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.558] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.558] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0076.559] FlushFileBuffers (hFile=0x350) returned 1 [0076.561] FlushFileBuffers (hFile=0x2bc) returned 1 [0076.563] CloseHandle (hObject=0x350) returned 1 [0076.563] CloseHandle (hObject=0x2bc) returned 1 [0076.563] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 1 [0076.565] SetEvent (hEvent=0x284) returned 1 [0076.565] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0076.565] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0076.565] CloseHandle (hObject=0x2bc) returned 1 [0076.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 0x20 [0076.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 0x20 [0076.565] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.568] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0076.568] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.568] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.568] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x350 [0076.568] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0076.570] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0076.572] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x122, lpOverlapped=0x0) returned 1 [0076.572] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.573] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.573] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0076.573] FlushFileBuffers (hFile=0x2bc) returned 1 [0076.576] FlushFileBuffers (hFile=0x350) returned 1 [0076.578] CloseHandle (hObject=0x2bc) returned 1 [0076.578] CloseHandle (hObject=0x350) returned 1 [0076.578] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 1 [0076.580] SetEvent (hEvent=0x284) returned 1 [0076.580] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0076.580] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0076.580] CloseHandle (hObject=0x350) returned 1 [0076.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 0x20 [0076.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 0x20 [0076.580] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.580] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0076.580] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.580] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.581] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0076.581] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0076.585] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0076.587] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x122, lpOverlapped=0x0) returned 1 [0076.587] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.587] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.587] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0076.587] FlushFileBuffers (hFile=0x350) returned 1 [0076.594] FlushFileBuffers (hFile=0x2bc) returned 1 [0076.601] CloseHandle (hObject=0x350) returned 1 [0076.601] CloseHandle (hObject=0x2bc) returned 1 [0076.601] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 1 [0076.602] SetEvent (hEvent=0x284) returned 1 [0076.602] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0076.603] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0076.603] CloseHandle (hObject=0x2bc) returned 1 [0076.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 0x20 [0076.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 0x20 [0076.603] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.603] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0076.603] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.603] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.603] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x350 [0076.604] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0076.607] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0076.609] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0076.610] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.610] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.610] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0076.610] FlushFileBuffers (hFile=0x2bc) returned 1 [0076.622] FlushFileBuffers (hFile=0x350) returned 1 [0076.626] CloseHandle (hObject=0x2bc) returned 1 [0076.626] CloseHandle (hObject=0x350) returned 1 [0076.627] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 1 [0076.631] SetEvent (hEvent=0x284) returned 1 [0076.631] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0076.631] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0076.631] CloseHandle (hObject=0x350) returned 1 [0076.631] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 0x20 [0076.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 0x20 [0076.632] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.632] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0076.632] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.632] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.632] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0076.632] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0076.638] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0076.640] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x142, lpOverlapped=0x0) returned 1 [0076.640] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.640] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.640] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0076.641] FlushFileBuffers (hFile=0x350) returned 1 [0076.870] FlushFileBuffers (hFile=0x2bc) returned 1 [0076.879] CloseHandle (hObject=0x350) returned 1 [0076.879] CloseHandle (hObject=0x2bc) returned 1 [0076.879] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 1 [0076.881] SetEvent (hEvent=0x284) returned 1 [0076.881] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0076.882] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0076.882] CloseHandle (hObject=0x2bc) returned 1 [0076.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 0x20 [0076.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 0x20 [0076.882] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0076.882] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0076.882] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.882] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0076.882] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x350 [0076.882] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0076.993] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0076.995] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0076.995] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.995] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0076.995] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0076.995] FlushFileBuffers (hFile=0x2bc) returned 1 [0077.120] FlushFileBuffers (hFile=0x350) returned 1 [0077.122] CloseHandle (hObject=0x2bc) returned 1 [0077.122] CloseHandle (hObject=0x350) returned 1 [0077.122] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 1 [0077.123] SetEvent (hEvent=0x284) returned 1 [0077.124] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0077.124] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0077.124] CloseHandle (hObject=0x350) returned 1 [0077.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 0x20 [0077.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 0x20 [0077.124] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0077.124] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0077.124] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.124] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.124] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0077.125] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0077.127] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0077.140] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x122, lpOverlapped=0x0) returned 1 [0077.140] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.140] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.140] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0077.140] FlushFileBuffers (hFile=0x350) returned 1 [0077.477] FlushFileBuffers (hFile=0x2bc) returned 1 [0077.490] CloseHandle (hObject=0x350) returned 1 [0077.490] CloseHandle (hObject=0x2bc) returned 1 [0077.491] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 1 [0077.492] SetEvent (hEvent=0x284) returned 1 [0077.492] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0077.492] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0077.492] CloseHandle (hObject=0x2bc) returned 1 [0077.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 0x20 [0077.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 0x20 [0077.492] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0077.492] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0077.493] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.493] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.493] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x350 [0077.493] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0077.506] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0077.510] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0077.511] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.511] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.511] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0077.511] FlushFileBuffers (hFile=0x2bc) returned 1 [0077.520] FlushFileBuffers (hFile=0x350) returned 1 [0077.525] CloseHandle (hObject=0x2bc) returned 1 [0077.525] CloseHandle (hObject=0x350) returned 1 [0077.526] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 1 [0077.527] SetEvent (hEvent=0x284) returned 1 [0077.527] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0077.527] GetFileSizeEx (in: hFile=0x350, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0077.527] CloseHandle (hObject=0x350) returned 1 [0077.527] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 0x20 [0077.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 0x20 [0077.528] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0077.528] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x350 [0077.528] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.528] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.528] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0077.528] ReadFile (in: hFile=0x350, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0077.532] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0077.534] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x162, lpOverlapped=0x0) returned 1 [0077.535] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.535] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.535] WriteFile (in: hFile=0x350, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0077.535] FlushFileBuffers (hFile=0x350) returned 1 [0077.542] FlushFileBuffers (hFile=0x2bc) returned 1 [0077.547] CloseHandle (hObject=0x350) returned 1 [0077.547] CloseHandle (hObject=0x2bc) returned 1 [0077.547] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 1 [0077.549] SetEvent (hEvent=0x284) returned 1 [0077.549] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0077.549] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=1052672) returned 1 [0077.550] CloseHandle (hObject=0x2bc) returned 1 [0077.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 0x20 [0077.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 0x20 [0077.550] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0077.550] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0077.550] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.550] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.550] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x31c [0077.552] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x101000, lpOverlapped=0x0) returned 1 [0077.584] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x101010, lpOverlapped=0x0) returned 1 [0077.655] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0077.655] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.655] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.655] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x101000, lpOverlapped=0x0) returned 1 [0077.661] FlushFileBuffers (hFile=0x2bc) returned 1 [0077.666] FlushFileBuffers (hFile=0x31c) returned 1 [0077.670] CloseHandle (hObject=0x2bc) returned 1 [0077.670] CloseHandle (hObject=0x31c) returned 1 [0077.670] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 1 [0077.679] SetEvent (hEvent=0x284) returned 1 [0077.679] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0077.679] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0077.680] CloseHandle (hObject=0x31c) returned 1 [0077.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 0x20 [0077.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 0x20 [0077.680] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0077.680] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0077.680] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.680] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.680] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0077.680] ReadFile (in: hFile=0x31c, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0077.683] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0077.684] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0077.685] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.685] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.685] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0077.685] FlushFileBuffers (hFile=0x31c) returned 1 [0077.692] FlushFileBuffers (hFile=0x2bc) returned 1 [0077.696] CloseHandle (hObject=0x31c) returned 1 [0077.697] CloseHandle (hObject=0x2bc) returned 1 [0077.697] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 1 [0077.698] SetEvent (hEvent=0x284) returned 1 [0077.698] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0077.698] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0077.699] CloseHandle (hObject=0x2bc) returned 1 [0077.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 0x20 [0077.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 0x20 [0077.699] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0077.699] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0077.699] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.699] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.699] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x31c [0077.699] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0077.702] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0077.704] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0077.704] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.704] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.704] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0077.705] FlushFileBuffers (hFile=0x2bc) returned 1 [0077.711] FlushFileBuffers (hFile=0x31c) returned 1 [0077.714] CloseHandle (hObject=0x2bc) returned 1 [0077.714] CloseHandle (hObject=0x31c) returned 1 [0077.714] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 1 [0077.716] SetEvent (hEvent=0x284) returned 1 [0077.716] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0077.716] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0077.716] CloseHandle (hObject=0x31c) returned 1 [0077.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 0x20 [0077.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 0x20 [0077.716] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0077.716] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0077.716] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.716] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.717] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0077.717] ReadFile (in: hFile=0x31c, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0077.719] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0077.721] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0077.721] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.721] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.722] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0077.775] FlushFileBuffers (hFile=0x31c) returned 1 [0077.980] FlushFileBuffers (hFile=0x2bc) returned 1 [0077.981] CloseHandle (hObject=0x31c) returned 1 [0077.981] CloseHandle (hObject=0x2bc) returned 1 [0077.982] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 1 [0077.983] SetEvent (hEvent=0x284) returned 1 [0077.983] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0077.984] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0077.984] CloseHandle (hObject=0x2bc) returned 1 [0077.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 0x20 [0077.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 0x20 [0077.984] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0077.984] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0077.984] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.984] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.985] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x31c [0077.985] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0077.987] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0077.989] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0077.989] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.989] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0077.990] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0077.990] FlushFileBuffers (hFile=0x2bc) returned 1 [0077.993] FlushFileBuffers (hFile=0x31c) returned 1 [0077.994] CloseHandle (hObject=0x2bc) returned 1 [0077.994] CloseHandle (hObject=0x31c) returned 1 [0077.994] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 1 [0077.996] SetEvent (hEvent=0x284) returned 1 [0077.996] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0077.996] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0077.996] CloseHandle (hObject=0x31c) returned 1 [0077.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 0x20 [0077.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 0x20 [0077.996] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0077.997] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0077.997] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.997] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0077.997] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0077.997] ReadFile (in: hFile=0x31c, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0077.999] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0078.001] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x122, lpOverlapped=0x0) returned 1 [0078.002] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.002] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.002] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0078.002] FlushFileBuffers (hFile=0x31c) returned 1 [0078.005] FlushFileBuffers (hFile=0x2bc) returned 1 [0078.007] CloseHandle (hObject=0x31c) returned 1 [0078.007] CloseHandle (hObject=0x2bc) returned 1 [0078.007] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 1 [0078.008] SetEvent (hEvent=0x284) returned 1 [0078.008] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0078.009] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0078.009] CloseHandle (hObject=0x2bc) returned 1 [0078.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 0x20 [0078.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 0x20 [0078.009] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.009] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0078.009] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.009] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.009] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x31c [0078.011] ReadFile (in: hFile=0x2bc, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0078.014] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0078.016] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0078.016] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.016] SetFilePointerEx (in: hFile=0x2bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.016] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0078.017] FlushFileBuffers (hFile=0x2bc) returned 1 [0078.020] FlushFileBuffers (hFile=0x31c) returned 1 [0078.021] CloseHandle (hObject=0x2bc) returned 1 [0078.021] CloseHandle (hObject=0x31c) returned 1 [0078.022] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 1 [0078.023] SetEvent (hEvent=0x284) returned 1 [0078.023] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0078.024] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0078.024] CloseHandle (hObject=0x31c) returned 1 [0078.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 0x20 [0078.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 0x20 [0078.024] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.025] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0078.025] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.025] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.025] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x2bc [0078.025] ReadFile (in: hFile=0x31c, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0078.028] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0078.029] WriteFile (in: hFile=0x2bc, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0078.030] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.030] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.030] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0078.030] FlushFileBuffers (hFile=0x31c) returned 1 [0078.160] FlushFileBuffers (hFile=0x2bc) returned 1 [0078.162] CloseHandle (hObject=0x31c) returned 1 [0078.162] CloseHandle (hObject=0x2bc) returned 1 [0078.162] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 1 [0078.163] SetEvent (hEvent=0x284) returned 1 [0078.163] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0078.165] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0078.165] CloseHandle (hObject=0x31c) returned 1 [0078.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 0x20 [0078.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 0x20 [0078.165] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.165] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c [0078.165] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.165] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.165] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x314 [0078.166] ReadFile (in: hFile=0x31c, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0078.169] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0078.171] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0078.171] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.171] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.171] WriteFile (in: hFile=0x31c, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0078.171] FlushFileBuffers (hFile=0x31c) returned 1 [0078.182] FlushFileBuffers (hFile=0x314) returned 1 [0078.185] CloseHandle (hObject=0x31c) returned 1 [0078.186] CloseHandle (hObject=0x314) returned 1 [0078.186] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 1 [0078.187] SetEvent (hEvent=0x284) returned 1 [0078.187] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0078.187] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0078.188] CloseHandle (hObject=0x314) returned 1 [0078.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 0x20 [0078.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 0x20 [0078.188] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.188] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0078.188] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.188] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.188] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0078.191] ReadFile (in: hFile=0x314, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0078.194] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0078.195] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x142, lpOverlapped=0x0) returned 1 [0078.196] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.196] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.196] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0078.196] FlushFileBuffers (hFile=0x314) returned 1 [0078.200] FlushFileBuffers (hFile=0x364) returned 1 [0078.203] CloseHandle (hObject=0x314) returned 1 [0078.203] CloseHandle (hObject=0x364) returned 1 [0078.203] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 1 [0078.205] SetEvent (hEvent=0x284) returned 1 [0078.205] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0078.205] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0078.205] CloseHandle (hObject=0x364) returned 1 [0078.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 0x20 [0078.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 0x20 [0078.205] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.205] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0078.205] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.205] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.205] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x314 [0078.209] ReadFile (in: hFile=0x364, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0078.225] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0078.227] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x162, lpOverlapped=0x0) returned 1 [0078.227] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.227] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.227] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0078.227] FlushFileBuffers (hFile=0x364) returned 1 [0078.232] FlushFileBuffers (hFile=0x314) returned 1 [0078.234] CloseHandle (hObject=0x364) returned 1 [0078.235] CloseHandle (hObject=0x314) returned 1 [0078.235] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 1 [0078.236] SetEvent (hEvent=0x284) returned 1 [0078.236] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0078.237] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0078.237] CloseHandle (hObject=0x314) returned 1 [0078.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 0x20 [0078.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 0x20 [0078.237] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.237] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0078.237] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.237] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.237] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0078.238] ReadFile (in: hFile=0x314, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0078.241] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0078.242] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x172, lpOverlapped=0x0) returned 1 [0078.243] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.243] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.243] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0078.243] FlushFileBuffers (hFile=0x314) returned 1 [0078.356] FlushFileBuffers (hFile=0x364) returned 1 [0078.369] CloseHandle (hObject=0x314) returned 1 [0078.371] CloseHandle (hObject=0x364) returned 1 [0078.372] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 1 [0078.373] SetEvent (hEvent=0x284) returned 1 [0078.374] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0078.374] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0078.374] CloseHandle (hObject=0x364) returned 1 [0078.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 0x20 [0078.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 0x20 [0078.374] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.374] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0078.374] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.374] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.374] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x314 [0078.375] ReadFile (in: hFile=0x364, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0078.378] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0078.381] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x152, lpOverlapped=0x0) returned 1 [0078.382] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.382] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.382] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0078.382] FlushFileBuffers (hFile=0x364) returned 1 [0078.395] FlushFileBuffers (hFile=0x314) returned 1 [0078.397] CloseHandle (hObject=0x364) returned 1 [0078.398] CloseHandle (hObject=0x314) returned 1 [0078.398] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 1 [0078.399] SetEvent (hEvent=0x284) returned 1 [0078.399] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0078.399] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0078.399] CloseHandle (hObject=0x314) returned 1 [0078.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 0x20 [0078.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 0x20 [0078.400] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.400] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0078.400] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.400] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.400] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0078.401] ReadFile (in: hFile=0x314, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0078.404] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0078.407] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0078.407] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.407] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.407] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0078.408] FlushFileBuffers (hFile=0x314) returned 1 [0078.416] FlushFileBuffers (hFile=0x364) returned 1 [0078.422] CloseHandle (hObject=0x314) returned 1 [0078.422] CloseHandle (hObject=0x364) returned 1 [0078.422] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 1 [0078.424] SetEvent (hEvent=0x284) returned 1 [0078.424] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0078.424] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0078.424] CloseHandle (hObject=0x364) returned 1 [0078.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 0x20 [0078.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 0x20 [0078.424] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.424] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0078.424] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.424] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.425] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x314 [0078.425] ReadFile (in: hFile=0x364, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0078.428] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0078.430] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0078.430] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.430] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.430] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0078.430] FlushFileBuffers (hFile=0x364) returned 1 [0078.922] FlushFileBuffers (hFile=0x314) returned 1 [0078.924] CloseHandle (hObject=0x364) returned 1 [0078.924] CloseHandle (hObject=0x314) returned 1 [0078.924] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 1 [0078.925] SetEvent (hEvent=0x284) returned 1 [0078.925] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0078.926] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0078.926] CloseHandle (hObject=0x314) returned 1 [0078.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 0x20 [0078.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 0x20 [0078.926] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.926] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0078.926] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.926] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.926] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0078.926] ReadFile (in: hFile=0x314, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0078.934] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0078.936] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x132, lpOverlapped=0x0) returned 1 [0078.936] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.936] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0078.936] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0078.937] FlushFileBuffers (hFile=0x314) returned 1 [0078.940] FlushFileBuffers (hFile=0x364) returned 1 [0078.943] CloseHandle (hObject=0x314) returned 1 [0078.944] CloseHandle (hObject=0x364) returned 1 [0078.944] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 1 [0078.945] SetEvent (hEvent=0x284) returned 1 [0078.945] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0078.945] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=1052672) returned 1 [0078.945] CloseHandle (hObject=0x364) returned 1 [0078.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 0x20 [0078.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 0x20 [0078.946] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0078.946] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0078.946] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.946] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0078.946] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x314 [0078.946] ReadFile (in: hFile=0x364, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x101000, lpOverlapped=0x0) returned 1 [0078.974] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x101010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x101010, lpOverlapped=0x0) returned 1 [0079.226] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x142, lpOverlapped=0x0) returned 1 [0079.236] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0079.236] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0079.236] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x101000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x101000, lpOverlapped=0x0) returned 1 [0079.270] FlushFileBuffers (hFile=0x364) returned 1 [0079.716] FlushFileBuffers (hFile=0x314) returned 1 [0079.717] CloseHandle (hObject=0x364) returned 1 [0079.717] CloseHandle (hObject=0x314) returned 1 [0079.717] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 1 [0079.727] SetEvent (hEvent=0x284) returned 1 [0079.727] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0079.728] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=69632) returned 1 [0079.728] CloseHandle (hObject=0x314) returned 1 [0079.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 0x20 [0079.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 0x20 [0079.728] GetFileAttributesW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\windows powershell.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0079.728] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0079.728] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0079.728] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0079.728] CreateFileW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\logs\\windows powershell.evtx.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0079.728] ReadFile (in: hFile=0x314, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x11000, lpOverlapped=0x0) returned 1 [0079.731] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x11010, lpOverlapped=0x0) returned 1 [0079.733] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x102, lpOverlapped=0x0) returned 1 [0079.733] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0079.733] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0079.733] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x11000, lpOverlapped=0x0) returned 1 [0079.733] FlushFileBuffers (hFile=0x314) returned 1 [0079.736] FlushFileBuffers (hFile=0x364) returned 1 [0079.738] CloseHandle (hObject=0x314) returned 1 [0079.738] CloseHandle (hObject=0x364) returned 1 [0079.738] DeleteFileW (lpFileName="\\\\?\\C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 1 [0079.739] SetEvent (hEvent=0x284) returned 1 [0079.740] CreateFileW (lpFileName="\\\\?\\C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0079.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\centre_quantum_appeals.exe" (normalized: "c:\\program files\\common files\\centre_quantum_appeals.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0079.740] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=78336) returned 1 [0079.740] CloseHandle (hObject=0x364) returned 1 [0079.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\centre_quantum_appeals.exe" (normalized: "c:\\program files\\common files\\centre_quantum_appeals.exe")) returned 0x20 [0079.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\centre_quantum_appeals.exe" (normalized: "c:\\program files\\common files\\centre_quantum_appeals.exe")) returned 0x20 [0079.740] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\centre_quantum_appeals.exe.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\centre_quantum_appeals.exe.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0079.740] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\centre_quantum_appeals.exe" (normalized: "c:\\program files\\common files\\centre_quantum_appeals.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0079.741] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0079.754] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=15984) returned 1 [0079.754] CloseHandle (hObject=0x364) returned 1 [0079.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20 [0079.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20 [0079.754] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0079.754] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0079.754] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0079.755] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0079.755] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x314 [0079.755] ReadFile (in: hFile=0x364, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x3e70, lpOverlapped=0x0) returned 1 [0079.757] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3e80, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x3e80, lpOverlapped=0x0) returned 1 [0079.758] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0xf2, lpOverlapped=0x0) returned 1 [0079.758] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0079.759] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0079.759] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x3e70, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x3e70, lpOverlapped=0x0) returned 1 [0079.759] FlushFileBuffers (hFile=0x364) returned 1 [0080.228] FlushFileBuffers (hFile=0x314) returned 1 [0080.229] CloseHandle (hObject=0x364) returned 1 [0080.229] CloseHandle (hObject=0x314) returned 1 [0080.229] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 1 [0080.231] SetEvent (hEvent=0x284) returned 1 [0080.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0080.232] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=18624) returned 1 [0080.232] CloseHandle (hObject=0x314) returned 1 [0080.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20 [0080.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20 [0080.232] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0080.232] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0080.232] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0080.232] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0080.233] ReadFile (in: hFile=0x314, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x48c0, lpOverlapped=0x0) returned 1 [0080.234] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x48d0, lpOverlapped=0x0) returned 1 [0080.235] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x122, lpOverlapped=0x0) returned 1 [0080.236] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0080.236] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0080.236] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x48c0, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x48c0, lpOverlapped=0x0) returned 1 [0080.236] FlushFileBuffers (hFile=0x314) returned 1 [0080.374] FlushFileBuffers (hFile=0x364) returned 1 [0080.376] CloseHandle (hObject=0x314) returned 1 [0080.376] CloseHandle (hObject=0x364) returned 1 [0080.377] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 1 [0080.378] SetEvent (hEvent=0x284) returned 1 [0080.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0080.378] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=20672) returned 1 [0080.378] CloseHandle (hObject=0x364) returned 1 [0080.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20 [0080.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20 [0080.378] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.378] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0080.378] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0080.378] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0080.379] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x314 [0080.379] ReadFile (in: hFile=0x364, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x50c0, lpOverlapped=0x0) returned 1 [0080.383] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x50d0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x50d0, lpOverlapped=0x0) returned 1 [0080.384] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x122, lpOverlapped=0x0) returned 1 [0080.384] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0080.384] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0080.384] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x50c0, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x50c0, lpOverlapped=0x0) returned 1 [0080.384] FlushFileBuffers (hFile=0x364) returned 1 [0080.386] FlushFileBuffers (hFile=0x314) returned 1 [0080.387] CloseHandle (hObject=0x364) returned 1 [0080.387] CloseHandle (hObject=0x314) returned 1 [0080.388] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 1 [0080.389] SetEvent (hEvent=0x284) returned 1 [0080.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0080.389] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=19648) returned 1 [0080.389] CloseHandle (hObject=0x314) returned 1 [0080.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20 [0080.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20 [0080.389] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0080.389] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0080.389] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0080.389] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0080.390] ReadFile (in: hFile=0x314, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4cc0, lpOverlapped=0x0) returned 1 [0080.392] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4cd0, lpOverlapped=0x0) returned 1 [0080.393] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x112, lpOverlapped=0x0) returned 1 [0080.393] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0080.393] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0080.394] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4cc0, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4cc0, lpOverlapped=0x0) returned 1 [0080.394] FlushFileBuffers (hFile=0x314) returned 1 [0080.526] FlushFileBuffers (hFile=0x364) returned 1 [0080.528] CloseHandle (hObject=0x314) returned 1 [0080.528] CloseHandle (hObject=0x364) returned 1 [0080.528] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 1 [0080.529] SetEvent (hEvent=0x284) returned 1 [0080.529] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0080.530] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=26816) returned 1 [0080.530] CloseHandle (hObject=0x364) returned 1 [0080.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20 [0080.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20 [0080.530] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0080.530] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0080.530] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0080.530] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x314 [0080.531] ReadFile (in: hFile=0x364, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x68c0, lpOverlapped=0x0) returned 1 [0080.702] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x68d0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x68d0, lpOverlapped=0x0) returned 1 [0080.703] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x122, lpOverlapped=0x0) returned 1 [0080.704] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0080.704] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0080.704] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x68c0, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x68c0, lpOverlapped=0x0) returned 1 [0080.704] FlushFileBuffers (hFile=0x364) returned 1 [0080.991] FlushFileBuffers (hFile=0x314) returned 1 [0080.992] CloseHandle (hObject=0x364) returned 1 [0080.992] CloseHandle (hObject=0x314) returned 1 [0080.993] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 1 [0080.994] SetEvent (hEvent=0x284) returned 1 [0080.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0080.994] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=19648) returned 1 [0080.994] CloseHandle (hObject=0x314) returned 1 [0080.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20 [0080.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20 [0080.994] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0080.994] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0080.995] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0080.995] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0080.995] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0080.995] ReadFile (in: hFile=0x314, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4cc0, lpOverlapped=0x0) returned 1 [0080.997] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4cd0, lpOverlapped=0x0) returned 1 [0080.998] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x122, lpOverlapped=0x0) returned 1 [0080.999] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0080.999] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0080.999] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4cc0, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4cc0, lpOverlapped=0x0) returned 1 [0080.999] FlushFileBuffers (hFile=0x314) returned 1 [0081.114] FlushFileBuffers (hFile=0x364) returned 1 [0081.116] CloseHandle (hObject=0x314) returned 1 [0081.116] CloseHandle (hObject=0x364) returned 1 [0081.116] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 1 [0081.118] SetEvent (hEvent=0x284) returned 1 [0081.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0081.118] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=24768) returned 1 [0081.118] CloseHandle (hObject=0x364) returned 1 [0081.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20 [0081.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20 [0081.118] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0081.118] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0081.118] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0081.118] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0081.119] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x314 [0081.119] ReadFile (in: hFile=0x364, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x60c0, lpOverlapped=0x0) returned 1 [0081.146] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x60d0, lpOverlapped=0x0) returned 1 [0081.147] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x112, lpOverlapped=0x0) returned 1 [0081.147] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0081.148] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0081.148] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x60c0, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x60c0, lpOverlapped=0x0) returned 1 [0081.148] FlushFileBuffers (hFile=0x364) returned 1 [0081.387] FlushFileBuffers (hFile=0x314) returned 1 [0081.389] CloseHandle (hObject=0x364) returned 1 [0081.389] CloseHandle (hObject=0x314) returned 1 [0081.389] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 1 [0081.392] SetEvent (hEvent=0x284) returned 1 [0081.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0081.392] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=21184) returned 1 [0081.392] CloseHandle (hObject=0x314) returned 1 [0081.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20 [0081.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20 [0081.392] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0081.392] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0081.392] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0081.392] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0081.393] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x364 [0081.393] ReadFile (in: hFile=0x314, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x52c0, lpOverlapped=0x0) returned 1 [0081.397] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x52d0, lpOverlapped=0x0) returned 1 [0081.398] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x112, lpOverlapped=0x0) returned 1 [0081.398] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0081.398] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0081.398] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x52c0, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x52c0, lpOverlapped=0x0) returned 1 [0081.399] FlushFileBuffers (hFile=0x314) returned 1 [0081.434] FlushFileBuffers (hFile=0x364) returned 1 [0081.441] CloseHandle (hObject=0x314) returned 1 [0081.441] CloseHandle (hObject=0x364) returned 1 [0081.441] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 1 [0081.442] SetEvent (hEvent=0x284) returned 1 [0081.442] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0081.443] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=19136) returned 1 [0081.443] CloseHandle (hObject=0x364) returned 1 [0081.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20 [0081.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20 [0081.443] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0081.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364 [0081.443] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0081.443] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb8 | out: lpNewFilePointer=0x0) returned 1 [0081.443] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x20, hTemplateFile=0x0) returned 0x314 [0081.443] ReadFile (in: hFile=0x364, lpBuffer=0x581e020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x54efbcc, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesRead=0x54efbcc*=0x4ac0, lpOverlapped=0x0) returned 1 [0081.448] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x4ad0, lpOverlapped=0x0) returned 1 [0081.449] WriteFile (in: hFile=0x314, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x54efba4, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54efba4*=0x122, lpOverlapped=0x0) returned 1 [0081.450] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0081.450] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54ef918 | out: lpNewFilePointer=0x0) returned 1 [0081.450] WriteFile (in: hFile=0x364, lpBuffer=0x581e020*, nNumberOfBytesToWrite=0x4ac0, lpNumberOfBytesWritten=0x54ef924, lpOverlapped=0x0 | out: lpBuffer=0x581e020*, lpNumberOfBytesWritten=0x54ef924*=0x4ac0, lpOverlapped=0x0) returned 1 [0081.450] FlushFileBuffers (hFile=0x364) returned 1 [0081.457] FlushFileBuffers (hFile=0x314) returned 1 [0081.461] CloseHandle (hObject=0x364) returned 1 [0081.462] CloseHandle (hObject=0x314) returned 1 [0081.474] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 1 [0081.475] SetEvent (hEvent=0x284) returned 1 [0081.475] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0081.475] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=162880) returned 1 [0081.475] CloseHandle (hObject=0x314) returned 1 [0081.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20 [0081.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20 [0081.476] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0081.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0081.477] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0081.477] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=656088) returned 1 [0081.477] CloseHandle (hObject=0x314) returned 1 [0081.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20 [0081.477] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20 [0081.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0081.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0081.478] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0081.478] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x54efbf0 | out: lpFileSize=0x54efbf0*=2054872) returned 1 [0081.478] CloseHandle (hObject=0x314) returned 1 [0081.478] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe")) returned 0x20 [0081.478] MoveFileW (lpExistingFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), lpNewFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 1 [0081.479] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0081.479] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0081.479] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0081.479] ReadFile (in: hFile=0x314, lpBuffer=0x581e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x581e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0081.512] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0xa739d, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0081.512] ReadFile (in: hFile=0x314, lpBuffer=0x585e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x585e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0081.538] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x1b5ad8, lpNewFilePointer=0x0, dwMoveMethod=0x54efa40 | out: lpNewFilePointer=0x0) returned 1 [0081.538] ReadFile (in: hFile=0x314, lpBuffer=0x589e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x54efa4c, lpOverlapped=0x0 | out: lpBuffer=0x589e058*, lpNumberOfBytesRead=0x54efa4c*=0x40000, lpOverlapped=0x0) returned 1 [0081.594] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x54efbb0 | out: lpNewFilePointer=0x0) returned 1 [0081.595] WriteFile (hFile=0x314, lpBuffer=0x581e020, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x54efba8, lpOverlapped=0x0) Thread: id = 21 os_tid = 0x4b8 [0055.241] GetProcessHeap () returned 0x3150000 [0055.241] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5720050 [0055.241] GetProcessHeap () returned 0x3150000 [0055.241] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5730058 [0055.242] GetProcessHeap () returned 0x3150000 [0055.242] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x28) returned 0x320fb20 [0055.242] GetProcessHeap () returned 0x3150000 [0055.242] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x110102) returned 0x5934020 [0055.245] GetProcessHeap () returned 0x3150000 [0055.245] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x50) returned 0x3170648 [0055.245] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0055.245] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0055.245] Wow64DisableWow64FsRedirection (in: OldValue=0x556f898 | out: OldValue=0x556f898*=0x0) returned 1 [0055.245] GetProcessHeap () returned 0x3150000 [0055.245] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170648 | out: hHeap=0x3150000) returned 1 [0055.245] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.245] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.245] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.245] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.245] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.245] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.246] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.246] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.246] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.246] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.246] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.246] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.246] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.246] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.246] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.246] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.246] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.246] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.276] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.276] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.277] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.278] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.278] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.278] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.278] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.278] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.278] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.278] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.278] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.278] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.279] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.279] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.279] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.279] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.279] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.279] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.279] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.279] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.279] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.279] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.279] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.279] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.280] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.281] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.281] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.281] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.281] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.281] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.281] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.281] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.281] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.281] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.281] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.281] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.281] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.282] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.282] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.282] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.282] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.282] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.282] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.282] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.282] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.282] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.282] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.282] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.282] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.283] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.283] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.283] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.283] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.283] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.283] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.283] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.283] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.283] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.283] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.283] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.283] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.284] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.284] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.284] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.284] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.284] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.284] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.284] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.284] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.284] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.284] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.284] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.284] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.285] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.285] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.285] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.285] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.285] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.285] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.285] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.285] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.285] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.285] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.285] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.286] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.287] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.287] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.287] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.287] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.287] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.287] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.287] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.287] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.287] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.287] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.287] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.287] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.288] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.288] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.288] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.288] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.288] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.288] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.288] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.288] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.288] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.288] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.288] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.288] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.289] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.289] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.289] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.289] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.289] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.289] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.289] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.289] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.289] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.289] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.289] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.289] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.290] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.291] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.291] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.291] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.291] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.291] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.291] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.291] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.291] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.291] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.291] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.291] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.291] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.292] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.292] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.292] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.292] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.292] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.292] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.292] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.292] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.292] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.292] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.292] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.292] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.293] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.293] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.293] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.293] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.293] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.293] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.293] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.293] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.293] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.293] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.295] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.295] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.295] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.295] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.295] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.295] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.295] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.296] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.296] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.296] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.296] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.296] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.296] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.296] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.296] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.296] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.296] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.296] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.296] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.297] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.297] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.297] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.297] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.297] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.297] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.297] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.297] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0057.972] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x556f808 | out: lpNewFilePointer=0x0) returned 1 [0057.972] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x556f808 | out: lpNewFilePointer=0x0) returned 1 [0057.972] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x358 [0057.973] ReadFile (in: hFile=0x354, lpBuffer=0x5934020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x556f81c, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesRead=0x556f81c*=0x7c000, lpOverlapped=0x0) returned 1 [0058.007] WriteFile (in: hFile=0x358, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x7c010, lpNumberOfBytesWritten=0x556f7f4, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f7f4*=0x7c010, lpOverlapped=0x0) returned 1 [0058.195] WriteFile (in: hFile=0x358, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x556f7f4, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f7f4*=0xf2, lpOverlapped=0x0) returned 1 [0058.195] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x556f568 | out: lpNewFilePointer=0x0) returned 1 [0058.195] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x556f568 | out: lpNewFilePointer=0x0) returned 1 [0058.196] WriteFile (in: hFile=0x354, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x7c000, lpNumberOfBytesWritten=0x556f574, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f574*=0x7c000, lpOverlapped=0x0) returned 1 [0058.203] FlushFileBuffers (hFile=0x354) returned 1 [0058.210] FlushFileBuffers (hFile=0x358) returned 1 [0058.212] CloseHandle (hObject=0x354) returned 1 [0058.212] CloseHandle (hObject=0x358) returned 1 [0058.223] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb")) returned 1 [0058.229] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0058.230] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x556f840 | out: lpFileSize=0x556f840*=9277440) returned 1 [0058.230] CloseHandle (hObject=0x358) returned 1 [0058.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde")) returned 0x220 [0058.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde")) returned 0x220 [0058.230] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0058.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358 [0058.231] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x556f808 | out: lpNewFilePointer=0x0) returned 1 [0058.231] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x556f808 | out: lpNewFilePointer=0x0) returned 1 [0058.231] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x354 [0058.231] ReadFile (in: hFile=0x358, lpBuffer=0x5934020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x556f81c, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesRead=0x556f81c*=0x110100, lpOverlapped=0x0) returned 1 [0058.570] WriteFile (in: hFile=0x354, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x556f7f4, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f7f4*=0x110100, lpOverlapped=0x0) returned 1 [0058.595] ReadFile (in: hFile=0x358, lpBuffer=0x5934020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x556f81c, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesRead=0x556f81c*=0x110100, lpOverlapped=0x0) returned 1 [0058.852] WriteFile (in: hFile=0x354, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x556f7f4, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f7f4*=0x110100, lpOverlapped=0x0) returned 1 [0059.073] ReadFile (in: hFile=0x358, lpBuffer=0x5934020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x556f81c, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesRead=0x556f81c*=0x110100, lpOverlapped=0x0) returned 1 [0059.109] WriteFile (in: hFile=0x354, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x556f7f4, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f7f4*=0x110100, lpOverlapped=0x0) returned 1 [0059.272] ReadFile (in: hFile=0x358, lpBuffer=0x5934020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x556f81c, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesRead=0x556f81c*=0x110100, lpOverlapped=0x0) returned 1 [0059.419] WriteFile (in: hFile=0x354, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x556f7f4, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f7f4*=0x110100, lpOverlapped=0x0) returned 1 [0059.481] ReadFile (in: hFile=0x358, lpBuffer=0x5934020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x556f81c, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesRead=0x556f81c*=0x110100, lpOverlapped=0x0) returned 1 [0059.676] WriteFile (in: hFile=0x354, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x556f7f4, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f7f4*=0x110100, lpOverlapped=0x0) returned 1 [0059.696] ReadFile (in: hFile=0x358, lpBuffer=0x5934020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x556f81c, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesRead=0x556f81c*=0x110100, lpOverlapped=0x0) returned 1 [0059.921] WriteFile (in: hFile=0x354, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x556f7f4, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f7f4*=0x110100, lpOverlapped=0x0) returned 1 [0059.942] ReadFile (in: hFile=0x358, lpBuffer=0x5934020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x556f81c, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesRead=0x556f81c*=0x110100, lpOverlapped=0x0) returned 1 [0060.066] WriteFile (in: hFile=0x354, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x556f7f4, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f7f4*=0x110100, lpOverlapped=0x0) returned 1 [0060.299] ReadFile (in: hFile=0x358, lpBuffer=0x5934020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x556f81c, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesRead=0x556f81c*=0x110100, lpOverlapped=0x0) returned 1 [0060.320] WriteFile (in: hFile=0x354, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x556f7f4, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f7f4*=0x110100, lpOverlapped=0x0) returned 1 [0060.775] ReadFile (in: hFile=0x358, lpBuffer=0x5934020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x556f81c, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesRead=0x556f81c*=0x58800, lpOverlapped=0x0) returned 1 [0060.779] WriteFile (in: hFile=0x354, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x58810, lpNumberOfBytesWritten=0x556f7f4, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f7f4*=0x58810, lpOverlapped=0x0) returned 1 [0060.785] WriteFile (in: hFile=0x354, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x556f7f4, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f7f4*=0xf2, lpOverlapped=0x0) returned 1 [0060.785] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x556f568 | out: lpNewFilePointer=0x0) returned 1 [0060.786] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x556f568 | out: lpNewFilePointer=0x0) returned 1 [0060.786] WriteFile (in: hFile=0x358, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x556f574, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f574*=0x110102, lpOverlapped=0x0) returned 1 [0060.800] WriteFile (in: hFile=0x358, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x556f574, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f574*=0x110102, lpOverlapped=0x0) returned 1 [0061.238] WriteFile (in: hFile=0x358, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x556f574, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f574*=0x110102, lpOverlapped=0x0) returned 1 [0061.253] WriteFile (in: hFile=0x358, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x556f574, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f574*=0x110102, lpOverlapped=0x0) returned 1 [0061.268] WriteFile (in: hFile=0x358, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x556f574, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f574*=0x110102, lpOverlapped=0x0) returned 1 [0061.539] WriteFile (in: hFile=0x358, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x556f574, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f574*=0x110102, lpOverlapped=0x0) returned 1 [0061.557] WriteFile (in: hFile=0x358, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x556f574, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f574*=0x110102, lpOverlapped=0x0) returned 1 [0061.731] WriteFile (in: hFile=0x358, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x556f574, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f574*=0x110102, lpOverlapped=0x0) returned 1 [0061.744] WriteFile (in: hFile=0x358, lpBuffer=0x5934020*, nNumberOfBytesToWrite=0x587f0, lpNumberOfBytesWritten=0x556f574, lpOverlapped=0x0 | out: lpBuffer=0x5934020*, lpNumberOfBytesWritten=0x556f574*=0x587f0, lpOverlapped=0x0) returned 1 [0061.745] FlushFileBuffers (hFile=0x358) returned 1 [0062.166] FlushFileBuffers (hFile=0x354) returned 1 [0062.428] CloseHandle (hObject=0x358) returned 1 [0064.071] CloseHandle (hObject=0x354) returned 1 [0065.531] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde")) returned 1 [0065.681] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0066.216] ResetEvent (hEvent=0x2a0) returned 1 [0066.216] SetEvent (hEvent=0x2a4) returned 1 [0066.216] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344 [0066.217] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x556f840 | out: lpFileSize=0x556f840*=88064) returned 1 [0066.217] CloseHandle (hObject=0x344) returned 1 [0066.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0066.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0066.218] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0066.218] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0066.218] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0066.348] ResetEvent (hEvent=0x2a0) returned 1 [0066.348] SetEvent (hEvent=0x2a4) returned 1 [0066.348] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368 [0066.352] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x556f840 | out: lpFileSize=0x556f840*=110592) returned 1 [0066.352] CloseHandle (hObject=0x368) returned 1 [0066.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0066.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0066.352] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0066.353] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0066.353] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0066.518] ResetEvent (hEvent=0x2a0) returned 1 [0066.518] SetEvent (hEvent=0x2a4) returned 1 [0066.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2bc [0066.519] GetFileSizeEx (in: hFile=0x2bc, lpFileSize=0x556f840 | out: lpFileSize=0x556f840*=146432) returned 1 [0066.519] CloseHandle (hObject=0x2bc) returned 1 [0066.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0066.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0066.519] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0066.519] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0066.519] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0066.896] ResetEvent (hEvent=0x2a0) returned 1 [0066.896] SetEvent (hEvent=0x2a4) returned 1 [0066.896] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314 [0066.900] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x556f840 | out: lpFileSize=0x556f840*=147456) returned 1 [0066.900] CloseHandle (hObject=0x314) returned 1 [0066.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0066.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20 [0066.900] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\configuration\\configuration.sqlite.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0066.901] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0066.901] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) Thread: id = 22 os_tid = 0xdf4 [0055.311] GetProcessHeap () returned 0x3150000 [0055.311] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5740940 [0055.312] GetProcessHeap () returned 0x3150000 [0055.312] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x10000) returned 0x5750948 [0055.312] GetProcessHeap () returned 0x3150000 [0055.312] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x28) returned 0x320fd90 [0055.312] GetProcessHeap () returned 0x3150000 [0055.312] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x110102) returned 0x5a59020 [0055.315] GetProcessHeap () returned 0x3150000 [0055.315] RtlAllocateHeap (HeapHandle=0x3150000, Flags=0x0, Size=0x50) returned 0x3170ac0 [0055.315] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0055.315] GetProcAddress (hModule=0x75e90000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x75ea6b30 [0055.315] Wow64DisableWow64FsRedirection (in: OldValue=0x55ef960 | out: OldValue=0x55ef960*=0x0) returned 1 [0055.315] GetProcessHeap () returned 0x3150000 [0055.315] HeapFree (in: hHeap=0x3150000, dwFlags=0x0, lpMem=0x3170ac0 | out: hHeap=0x3150000) returned 1 [0055.315] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.316] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.316] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.316] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.316] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.316] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.316] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.316] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.316] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.316] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.316] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.316] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.316] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.317] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.318] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.319] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.319] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.319] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.319] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.319] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.319] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.319] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.319] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.319] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.319] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.319] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.319] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.320] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.321] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.321] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.321] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.321] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.321] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.321] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.321] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.321] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.321] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.321] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.321] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.321] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.322] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.322] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.322] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.322] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.322] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.322] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.322] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.322] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.322] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.322] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.322] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.322] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.323] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.324] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.324] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.324] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.324] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.324] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.324] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.324] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.324] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.324] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.324] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.324] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.324] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.325] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.325] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.325] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.325] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.325] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.325] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.325] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.325] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.325] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.325] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.325] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.325] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.326] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.326] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.326] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.326] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.326] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.326] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.326] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.326] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.326] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.326] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.326] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.326] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.327] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.328] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.328] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.328] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.328] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.328] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.328] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.328] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.328] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.328] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.328] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.328] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.328] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.329] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.329] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.329] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.329] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.329] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.329] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.329] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.329] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.329] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.329] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.329] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.329] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.330] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.331] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.331] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.331] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.331] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.331] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.331] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.331] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.331] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.331] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.331] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.331] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.331] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.332] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.333] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.333] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.333] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.333] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.333] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.333] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.333] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.333] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.333] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.333] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.333] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.333] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.334] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.334] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.334] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.334] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.334] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.334] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.334] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.334] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.334] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.334] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.334] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.334] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.335] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.336] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0055.336] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) returned 0x0 [0058.021] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x55ef8d0 | out: lpNewFilePointer=0x0) returned 1 [0058.021] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x55ef8d0 | out: lpNewFilePointer=0x0) returned 1 [0058.022] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x360 [0058.022] ReadFile (in: hFile=0x35c, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0x110100, lpOverlapped=0x0) returned 1 [0058.272] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0x110100, lpOverlapped=0x0) returned 1 [0058.296] ReadFile (in: hFile=0x35c, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0xedf00, lpOverlapped=0x0) returned 1 [0058.614] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0xedf10, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0xedf10, lpOverlapped=0x0) returned 1 [0058.632] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0xf2, lpOverlapped=0x0) returned 1 [0058.632] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x55ef630 | out: lpNewFilePointer=0x0) returned 1 [0058.632] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x55ef630 | out: lpNewFilePointer=0x0) returned 1 [0058.632] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0x110102, lpOverlapped=0x0) returned 1 [0058.639] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0xedefe, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0xedefe, lpOverlapped=0x0) returned 1 [0058.641] FlushFileBuffers (hFile=0x35c) returned 1 [0058.651] FlushFileBuffers (hFile=0x360) returned 1 [0058.655] CloseHandle (hObject=0x35c) returned 1 [0058.655] CloseHandle (hObject=0x360) returned 1 [0058.931] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde")) returned 1 [0058.948] ResetEvent (hEvent=0x2a0) returned 1 [0058.948] SetEvent (hEvent=0x2a4) returned 1 [0058.948] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), dwDesiredAccess=0x80000000, dwShareMode=0x7, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360 [0058.949] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x55ef908 | out: lpFileSize=0x55ef908*=11493376) returned 1 [0058.949] CloseHandle (hObject=0x360) returned 1 [0058.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde")) returned 0x220 [0058.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde")) returned 0x220 [0058.949] GetFileAttributesW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde.id[b4197730-2275].[checkcheck07@qq.com].adame")) returned 0xffffffff [0058.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360 [0058.949] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x55ef8d0 | out: lpNewFilePointer=0x0) returned 1 [0058.949] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x55ef8d0 | out: lpNewFilePointer=0x0) returned 1 [0058.949] CreateFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE.id[B4197730-2275].[checkcheck07@qq.com].Adame" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde.id[b4197730-2275].[checkcheck07@qq.com].adame"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x220, hTemplateFile=0x0) returned 0x35c [0058.949] ReadFile (in: hFile=0x360, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0x110100, lpOverlapped=0x0) returned 1 [0059.138] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0x110100, lpOverlapped=0x0) returned 1 [0059.160] ReadFile (in: hFile=0x360, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0x110100, lpOverlapped=0x0) returned 1 [0059.328] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0x110100, lpOverlapped=0x0) returned 1 [0059.350] ReadFile (in: hFile=0x360, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0x110100, lpOverlapped=0x0) returned 1 [0059.519] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0x110100, lpOverlapped=0x0) returned 1 [0059.722] ReadFile (in: hFile=0x360, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0x110100, lpOverlapped=0x0) returned 1 [0059.757] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0x110100, lpOverlapped=0x0) returned 1 [0059.960] ReadFile (in: hFile=0x360, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0x110100, lpOverlapped=0x0) returned 1 [0059.982] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0x110100, lpOverlapped=0x0) returned 1 [0060.104] ReadFile (in: hFile=0x360, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0x110100, lpOverlapped=0x0) returned 1 [0060.138] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0x110100, lpOverlapped=0x0) returned 1 [0060.373] ReadFile (in: hFile=0x360, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0x110100, lpOverlapped=0x0) returned 1 [0060.395] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0x110100, lpOverlapped=0x0) returned 1 [0061.033] ReadFile (in: hFile=0x360, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0x110100, lpOverlapped=0x0) returned 1 [0061.335] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0x110100, lpOverlapped=0x0) returned 1 [0061.357] ReadFile (in: hFile=0x360, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0x110100, lpOverlapped=0x0) returned 1 [0061.601] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0x110100, lpOverlapped=0x0) returned 1 [0061.623] ReadFile (in: hFile=0x360, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0x110100, lpOverlapped=0x0) returned 1 [0061.829] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110100, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0x110100, lpOverlapped=0x0) returned 1 [0061.850] ReadFile (in: hFile=0x360, lpBuffer=0x5a59020, nNumberOfBytesToRead=0x110100, lpNumberOfBytesRead=0x55ef8e4, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesRead=0x55ef8e4*=0x55600, lpOverlapped=0x0) returned 1 [0062.273] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x55610, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0x55610, lpOverlapped=0x0) returned 1 [0062.279] WriteFile (in: hFile=0x35c, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x55ef8bc, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef8bc*=0xf2, lpOverlapped=0x0) returned 1 [0062.279] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x55ef630 | out: lpNewFilePointer=0x0) returned 1 [0062.279] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x55ef630 | out: lpNewFilePointer=0x0) returned 1 [0062.279] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0x110102, lpOverlapped=0x0) returned 1 [0062.293] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0x110102, lpOverlapped=0x0) returned 1 [0062.630] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0x110102, lpOverlapped=0x0) returned 1 [0062.644] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0x110102, lpOverlapped=0x0) returned 1 [0062.659] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0x110102, lpOverlapped=0x0) returned 1 [0062.819] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0x110102, lpOverlapped=0x0) returned 1 [0062.833] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0x110102, lpOverlapped=0x0) returned 1 [0062.848] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0x110102, lpOverlapped=0x0) returned 1 [0063.093] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0x110102, lpOverlapped=0x0) returned 1 [0063.107] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x110102, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0x110102, lpOverlapped=0x0) returned 1 [0063.274] WriteFile (in: hFile=0x360, lpBuffer=0x5a59020*, nNumberOfBytesToWrite=0x555ec, lpNumberOfBytesWritten=0x55ef63c, lpOverlapped=0x0 | out: lpBuffer=0x5a59020*, lpNumberOfBytesWritten=0x55ef63c*=0x555ec, lpOverlapped=0x0) returned 1 [0063.275] FlushFileBuffers (hFile=0x360) returned 1 [0063.746] FlushFileBuffers (hFile=0x35c) returned 1 [0064.151] CloseHandle (hObject=0x360) returned 1 [0065.619] CloseHandle (hObject=0x35c) returned 1 [0066.910] DeleteFileW (lpFileName="\\\\?\\C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde")) returned 1 [0066.929] WaitForSingleObject (hHandle=0x2a0, dwMilliseconds=0xffffffff) Thread: id = 23 os_tid = 0xcfc Thread: id = 24 os_tid = 0x4a0 Process: id = "5" image_name = "dllhost.exe" filename = "c:\\windows\\syswow64\\dllhost.exe" page_root = "0xe4a2000" os_pid = "0x15c" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x6c0" cmd_line = "\"C:\\Windows\\SysWOW64\\dllhost.exe\"" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 10 os_tid = 0x4a0 Thread: id = 11 os_tid = 0xe60 Process: id = "6" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x4dc89000" os_pid = "0x6d0" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "C:\\WINDOWS\\system32\\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xe], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wisvc" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\WpnService" [0xa], "NT SERVICE\\wuauserv" [0xa], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000aff3" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 25 os_tid = 0x6d4 Thread: id = 26 os_tid = 0x6d8 Thread: id = 27 os_tid = 0x6f0 Thread: id = 28 os_tid = 0x6f4 Thread: id = 29 os_tid = 0x6f8 Thread: id = 30 os_tid = 0x6fc Thread: id = 31 os_tid = 0x700 Thread: id = 32 os_tid = 0x704 Process: id = "7" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x3a50b000" os_pid = "0xbac" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "C:\\WINDOWS\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011c87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 33 os_tid = 0xbb0 Thread: id = 34 os_tid = 0xbb4 Thread: id = 35 os_tid = 0xbbc Thread: id = 36 os_tid = 0xbc0 Thread: id = 37 os_tid = 0xbc4 Thread: id = 38 os_tid = 0xbc8 Thread: id = 39 os_tid = 0xbe4 Thread: id = 40 os_tid = 0xbf4 Thread: id = 98 os_tid = 0x588 Thread: id = 166 os_tid = 0xc1c Process: id = "8" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x43902000" os_pid = "0x8a4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "7" os_parent_pid = "0xbac" cmd_line = "C:\\WINDOWS\\Explorer.EXE" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011c87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 41 os_tid = 0xa74 Thread: id = 42 os_tid = 0x8b0 Thread: id = 43 os_tid = 0x890 Thread: id = 44 os_tid = 0xbdc Thread: id = 45 os_tid = 0xba4 Thread: id = 46 os_tid = 0xb5c Thread: id = 47 os_tid = 0xac0 Thread: id = 48 os_tid = 0xabc Thread: id = 49 os_tid = 0xab8 Thread: id = 50 os_tid = 0xab4 Thread: id = 51 os_tid = 0xab0 Thread: id = 52 os_tid = 0xaac Thread: id = 53 os_tid = 0xaa8 Thread: id = 54 os_tid = 0xaa4 Thread: id = 55 os_tid = 0xaa0 Thread: id = 56 os_tid = 0xa9c Thread: id = 57 os_tid = 0xa98 Thread: id = 58 os_tid = 0xa94 Thread: id = 59 os_tid = 0xa90 Thread: id = 60 os_tid = 0xa8c Thread: id = 61 os_tid = 0xa88 Thread: id = 62 os_tid = 0xa84 Thread: id = 63 os_tid = 0xa70 Thread: id = 64 os_tid = 0xa6c Thread: id = 65 os_tid = 0xa68 Thread: id = 66 os_tid = 0xa64 Thread: id = 67 os_tid = 0xa58 Thread: id = 68 os_tid = 0xa54 Thread: id = 69 os_tid = 0xa50 Thread: id = 70 os_tid = 0xa18 Thread: id = 71 os_tid = 0xa10 Thread: id = 72 os_tid = 0xa0c Thread: id = 73 os_tid = 0xa08 Thread: id = 74 os_tid = 0x9f8 Thread: id = 75 os_tid = 0x9f4 Thread: id = 76 os_tid = 0x9ec Thread: id = 77 os_tid = 0x9dc Thread: id = 78 os_tid = 0x9d8 Thread: id = 79 os_tid = 0x9d4 Thread: id = 80 os_tid = 0x9d0 Thread: id = 81 os_tid = 0x9c4 Thread: id = 82 os_tid = 0x9c0 Thread: id = 83 os_tid = 0x9bc Thread: id = 84 os_tid = 0x9b0 Thread: id = 85 os_tid = 0x9b8 Thread: id = 86 os_tid = 0x9b4 Thread: id = 87 os_tid = 0x9ac Thread: id = 88 os_tid = 0x9a8 Thread: id = 89 os_tid = 0x9a4 Thread: id = 90 os_tid = 0x9a0 Thread: id = 91 os_tid = 0x984 Thread: id = 92 os_tid = 0x980 Thread: id = 93 os_tid = 0x97c Thread: id = 94 os_tid = 0x8ac Thread: id = 95 os_tid = 0x8a8 Thread: id = 96 os_tid = 0x378 Thread: id = 97 os_tid = 0x5a8 Thread: id = 99 os_tid = 0x57c Thread: id = 100 os_tid = 0x580 Thread: id = 101 os_tid = 0x440 Thread: id = 113 os_tid = 0x368 Thread: id = 114 os_tid = 0x77c Thread: id = 115 os_tid = 0x790 Thread: id = 116 os_tid = 0x750 Thread: id = 117 os_tid = 0x74c Thread: id = 153 os_tid = 0x6d0 Thread: id = 154 os_tid = 0xbf8 Thread: id = 155 os_tid = 0xb9c Thread: id = 156 os_tid = 0x814 Thread: id = 157 os_tid = 0x81c Thread: id = 158 os_tid = 0x370 Thread: id = 159 os_tid = 0x5a4 Thread: id = 160 os_tid = 0x6d0 Thread: id = 161 os_tid = 0xc04 Thread: id = 162 os_tid = 0xc08 Thread: id = 164 os_tid = 0xc14 Thread: id = 165 os_tid = 0xc18 Thread: id = 167 os_tid = 0xc20 Thread: id = 168 os_tid = 0xc2c Thread: id = 169 os_tid = 0xc30 Thread: id = 170 os_tid = 0xc34 Thread: id = 171 os_tid = 0xc38 Thread: id = 184 os_tid = 0xcac Thread: id = 190 os_tid = 0xccc Thread: id = 191 os_tid = 0xce0 Thread: id = 192 os_tid = 0xe60 Thread: id = 193 os_tid = 0xe64 Thread: id = 194 os_tid = 0xe68 Thread: id = 195 os_tid = 0xe6c Thread: id = 204 os_tid = 0xe94 Process: id = "9" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x50094000" os_pid = "0x5b0" os_integrity_level = "0x4000" os_privileges = "0x260814080" monitor_reason = "rpc_server" parent_id = "7" os_parent_pid = "0xbac" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:00010654" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 102 os_tid = 0x5a0 Thread: id = 103 os_tid = 0x948 Thread: id = 104 os_tid = 0x940 Thread: id = 105 os_tid = 0x530 Thread: id = 106 os_tid = 0x690 Thread: id = 107 os_tid = 0x688 Thread: id = 108 os_tid = 0x5f0 Thread: id = 109 os_tid = 0x5ec Thread: id = 110 os_tid = 0x5e8 Thread: id = 111 os_tid = 0x5b8 Thread: id = 112 os_tid = 0x5b4 Thread: id = 163 os_tid = 0xc10 Process: id = "10" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x5d4c5000" os_pid = "0x8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "8" os_parent_pid = "0x8a4" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\bthserv" [0xa], "NT SERVICE\\CDPSvc" [0xa], "NT SERVICE\\EventSystem" [0xa], "NT SERVICE\\FontCache" [0xa], "NT SERVICE\\LicenseManager" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xe], "NT SERVICE\\PhoneSvc" [0xa], "NT SERVICE\\RemoteRegistry" [0xa], "S-1-5-80-2226967063-754826275-1661302337-2802353169-2369347280" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\tzautoupdate" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "S-1-5-80-3916113136-2435487254-2535488001-4050622930-2364918814" [0xa], "NT SERVICE\\workfolderssvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b6eb" [0xc000000f], "LOCAL" [0x7] Thread: id = 118 os_tid = 0x784 Thread: id = 119 os_tid = 0x710 Thread: id = 120 os_tid = 0x374 Thread: id = 121 os_tid = 0x2a4 Thread: id = 122 os_tid = 0xa1c Thread: id = 123 os_tid = 0x7e4 Thread: id = 124 os_tid = 0x9c8 Thread: id = 125 os_tid = 0x6ac Thread: id = 126 os_tid = 0x9e8 Thread: id = 127 os_tid = 0xbe8 Thread: id = 128 os_tid = 0xbe0 Thread: id = 129 os_tid = 0xbd4 Thread: id = 130 os_tid = 0xbd0 Thread: id = 131 os_tid = 0x9f0 Thread: id = 132 os_tid = 0x974 Thread: id = 133 os_tid = 0x840 Thread: id = 134 os_tid = 0x738 Thread: id = 135 os_tid = 0x578 Thread: id = 136 os_tid = 0x500 Thread: id = 137 os_tid = 0x4d4 Thread: id = 138 os_tid = 0x4d0 Thread: id = 139 os_tid = 0x4c8 Thread: id = 140 os_tid = 0x4c4 Thread: id = 141 os_tid = 0x4c0 Thread: id = 142 os_tid = 0x4bc Thread: id = 143 os_tid = 0x4a8 Thread: id = 144 os_tid = 0x4a4 Thread: id = 145 os_tid = 0x490 Thread: id = 146 os_tid = 0x48c Thread: id = 147 os_tid = 0x474 Thread: id = 148 os_tid = 0x470 Thread: id = 149 os_tid = 0x408 Thread: id = 150 os_tid = 0x404 Thread: id = 151 os_tid = 0x2fc Thread: id = 152 os_tid = 0x2f8 Thread: id = 172 os_tid = 0xc40 Process: id = "11" image_name = "mobsync.exe" filename = "c:\\windows\\system32\\mobsync.exe" page_root = "0x350f3000" os_pid = "0xc74" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "8" os_parent_pid = "0x8a4" cmd_line = "C:\\WINDOWS\\System32\\mobsync.exe -Embedding" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011c87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 173 os_tid = 0xc98 Thread: id = 174 os_tid = 0xc94 Thread: id = 175 os_tid = 0xc90 Thread: id = 176 os_tid = 0xc8c Thread: id = 177 os_tid = 0xc88 Thread: id = 178 os_tid = 0xc84 Thread: id = 179 os_tid = 0xc80 Thread: id = 180 os_tid = 0xc7c Thread: id = 181 os_tid = 0xc78 Thread: id = 182 os_tid = 0xc9c Process: id = "12" image_name = "dllhost.exe" filename = "c:\\users\\fd1hvy\\appdata\\local\\dllhost.exe" page_root = "0x34fd6000" os_pid = "0xca4" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x8a4" cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Local\\dllhost.exe\" " cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011c87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 183 os_tid = 0xca8 [0171.073] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0171.074] _o__set_app_type () returned 0x1 [0171.074] _o__set_fmode () returned 0x0 [0171.074] _o___p__commode () returned 0x760796f8 [0171.074] _o__crt_atexit () returned 0x0 [0171.074] _o__configure_wide_argv () returned 0x0 [0171.074] RtlInitializeSListHead (in: ListHead=0x373050 | out: ListHead=0x373050) [0171.074] _o__controlfp_s () returned 0x0 [0171.074] _o__configthreadlocale () returned 0x2 [0171.074] _o__initialize_wide_environment () returned 0x0 [0171.077] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x371db0) returned 0x0 [0171.077] _o__set_new_mode () returned 0x0 [0171.077] _o_memset () returned 0x2a7fe18 [0171.077] GetStartupInfoW (in: lpStartupInfo=0x2a7fe18 | out: lpStartupInfo=0x2a7fe18*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\FD1HVy\\AppData\\Local\\dllhost.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0171.077] _o__get_wide_winmain_command_line () returned 0x2ae1b48 [0171.077] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0171.077] NtSetInformationProcess (ProcessHandle=0xffffffff, ProcessInformationClass=0x22, ProcessInformation=0x2a7fbd4, ProcessInformationLength=0x4) returned 0x0 [0171.118] IIDFromString (in: lpsz="", lpiid=0x2a7fbd8 | out: lpiid=0x2a7fbd8) returned 0x80070057 [0171.118] GetModuleHandleW (lpModuleName=0x0) returned 0x370000 [0171.118] _o_exit () Thread: id = 185 os_tid = 0xcb0 Process: id = "13" image_name = "dllhost.exe" filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\dllhost.exe" page_root = "0x3baef000" os_pid = "0xcb4" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x8a4" cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dllhost.exe\" " cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011c87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 186 os_tid = 0xcb8 [0171.545] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0171.546] _o__set_app_type () returned 0x1 [0171.546] _o__set_fmode () returned 0x0 [0171.546] _o___p__commode () returned 0x760796f8 [0171.546] _o__crt_atexit () returned 0x0 [0171.546] _o__configure_wide_argv () returned 0x0 [0171.546] RtlInitializeSListHead (in: ListHead=0x1323050 | out: ListHead=0x1323050) [0171.546] _o__controlfp_s () returned 0x0 [0171.546] _o__configthreadlocale () returned 0x2 [0171.546] _o__initialize_wide_environment () returned 0x0 [0171.548] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1321db0) returned 0x0 [0171.548] _o__set_new_mode () returned 0x0 [0171.548] _o_memset () returned 0xb5fad4 [0171.548] GetStartupInfoW (in: lpStartupInfo=0xb5fad4 | out: lpStartupInfo=0xb5fad4*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dllhost.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0171.548] _o__get_wide_winmain_command_line () returned 0xe11bc4 [0171.548] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0171.548] NtSetInformationProcess (ProcessHandle=0xffffffff, ProcessInformationClass=0x22, ProcessInformation=0xb5f890, ProcessInformationLength=0x4) returned 0x0 [0171.548] IIDFromString (in: lpsz="", lpiid=0xb5f894 | out: lpiid=0xb5f894) returned 0x80070057 [0171.549] GetModuleHandleW (lpModuleName=0x0) returned 0x1320000 [0171.549] _o_exit () Thread: id = 187 os_tid = 0xcbc Process: id = "14" image_name = "dllhost.exe" filename = "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\dllhost.exe" page_root = "0x4c5fe000" os_pid = "0xcc0" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x8a4" cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dllhost.exe\" " cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011c87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 188 os_tid = 0xcc4 [0171.794] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0171.794] _o__set_app_type () returned 0x1 [0171.794] _o__set_fmode () returned 0x0 [0171.794] _o___p__commode () returned 0x760796f8 [0171.794] _o__crt_atexit () returned 0x0 [0171.794] _o__configure_wide_argv () returned 0x0 [0171.794] RtlInitializeSListHead (in: ListHead=0x923050 | out: ListHead=0x923050) [0171.794] _o__controlfp_s () returned 0x0 [0171.795] _o__configthreadlocale () returned 0x2 [0171.795] _o__initialize_wide_environment () returned 0x0 [0171.797] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x921db0) returned 0x0 [0171.797] _o__set_new_mode () returned 0x0 [0171.797] _o_memset () returned 0x29af904 [0171.797] GetStartupInfoW (in: lpStartupInfo=0x29af904 | out: lpStartupInfo=0x29af904*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dllhost.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0171.797] _o__get_wide_winmain_command_line () returned 0x31c08 [0171.797] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0171.797] NtSetInformationProcess (ProcessHandle=0xffffffff, ProcessInformationClass=0x22, ProcessInformation=0x29af6c0, ProcessInformationLength=0x4) returned 0x0 [0171.797] IIDFromString (in: lpsz="", lpiid=0x29af6c4 | out: lpiid=0x29af6c4) returned 0x80070057 [0171.797] GetModuleHandleW (lpModuleName=0x0) returned 0x920000 [0171.797] _o_exit () Thread: id = 189 os_tid = 0xcc8 Process: id = "15" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x78136000" os_pid = "0xe70" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "C:\\WINDOWS\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00011c87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 196 os_tid = 0xe74 Thread: id = 197 os_tid = 0xe78 Thread: id = 198 os_tid = 0xe7c Thread: id = 199 os_tid = 0xe80 Thread: id = 200 os_tid = 0xe84 Thread: id = 201 os_tid = 0xe88 Thread: id = 202 os_tid = 0xe8c Thread: id = 203 os_tid = 0xe90 Thread: id = 205 os_tid = 0xe98